diff --git a/ip6t-firewall-gateway b/ip6t-firewall-gateway index 84e1ea2..2450179 100755 --- a/ip6t-firewall-gateway +++ b/ip6t-firewall-gateway @@ -2689,6 +2689,20 @@ if [[ ${#mail_server_only_local_ip_arr[@]} -gt 0 ]] ; then for _dev in ${local_if_arr[@]} ; do $ip6t -A FORWARD -i $_dev -p tcp -d $_ip --dport $standard_smtp_port -m conntrack --ctstate NEW -j ACCEPT done + + for _dev in ${ext_if_arr[@]} ; do + + # Razor2 (TCP Port 2703) + $ip6t -A FORWARD -o $_dev -p tcp --dport 2703 -s $_ip -m conntrack --ctstate NEW -j ACCEPT + # Pyzor (UDP Port 24441 or TCP Port 24441 or both ?) + $ip6t -A FORWARD -o $_dev -p tcp --dport 24441 -s $_ip -m conntrack --ctstate NEW -j ACCEPT + $ip6t -A FORWARD -o $_dev -p udp --dport 24441 -s $_ip -m conntrack --ctstate NEW -j ACCEPT + + # - DCC (port udp:6277) + $ip6t -A FORWARD -o $_dev -p udp --dport 6277 -s $_ip -m conntrack --ctstate NEW -j ACCEPT + # if DCC Server is running (port tcp:6277) + $ip6t -A FORWARD -o $_dev -p tcp --dport 6277 -s $_ip -m conntrack --ctstate NEW -j ACCEPT + done fi # - Note: @@ -2696,6 +2710,7 @@ if [[ ${#mail_server_only_local_ip_arr[@]} -gt 0 ]] ; then # - special rule. # - if $kernel_forward_between_interfaces && $local_alias_interfaces ; then + $ip6t -A FORWARD -p tcp -d $_ip --dport $standard_smtp_port --tcp-flag ACK ACK -j ACCEPT $ip6t -A FORWARD -p tcp -s $_ip --sport $standard_smtp_port --tcp-flag ACK ACK -j ACCEPT fi diff --git a/ipt-firewall-gateway b/ipt-firewall-gateway index a70c611..a7b587c 100755 --- a/ipt-firewall-gateway +++ b/ipt-firewall-gateway @@ -3462,6 +3462,19 @@ if [[ ${#mail_server_only_local_ip_arr[@]} -gt 0 ]] ; then for _dev in ${local_if_arr[@]} ; do $ipt -A FORWARD -i $_dev -p tcp -d $_ip --dport $standard_smtp_port -m conntrack --ctstate NEW -j ACCEPT done + for _dev in ${ext_if_arr[@]} ; do + + # Razor2 (TCP Port 2703) + $ipt -A FORWARD -o $_dev -p tcp --dport 2703 -s $_ip -m conntrack --ctstate NEW -j ACCEPT + # Pyzor (UDP Port 24441 or TCP Port 24441 or both ?) + $ipt -A FORWARD -o $_dev -p tcp --dport 24441 -s $_ip -m conntrack --ctstate NEW -j ACCEPT + $ipt -A FORWARD -o $_dev -p udp --dport 24441 -s $_ip -m conntrack --ctstate NEW -j ACCEPT + + # - DCC (port udp:6277) + $ipt -A FORWARD -o $_dev -p udp --dport 6277 -s $_ip -m conntrack --ctstate NEW -j ACCEPT + # if DCC Server is running (port tcp:6277) + $ipt -A FORWARD -o $_dev -p tcp --dport 6277 -s $_ip -m conntrack --ctstate NEW -j ACCEPT + done fi # - Note: