diff --git a/ip6t-firewall-gateway b/ip6t-firewall-gateway index 963f2df..8d8f1dd 100755 --- a/ip6t-firewall-gateway +++ b/ip6t-firewall-gateway @@ -3553,14 +3553,11 @@ fi echononl "\t\tNTP Service out only" if $allow_ntp_request_out ; then - for _dev in ${ext_if_arr[@]} ; do - $ip6t -A OUTPUT -o $_dev -p udp --dport $standard_ntp_port -m conntrack --ctstate NEW -j ACCEPT - if $kernel_forward_between_interfaces && ! $permit_local_net_to_inet ; then - $ip6t -A FORWARD -o $_dev -p udp --dport $standard_ntp_port -m conntrack --ctstate NEW -j ACCEPT - fi - done + # see : out_tcp_port_arr out_udp_port_arr at post_decalrations.conf + # echo_done + else echo_skipped fi @@ -3574,10 +3571,10 @@ echononl "\t\tNTP Service Gateway" if $local_ntp_service ; then if ! $allow_ntp_request_out ; then for _dev in ${ext_if_arr[@]} ; do - $ip6t -A OUTPUT -o $_dev -p udp --dport $standard_ntp_port -m conntrack --ctstate NEW -j ACCEPT + $ip6t -A OUTPUT -o $_dev -p udp --dport $standard_ntp_udp_port -m conntrack --ctstate NEW -j ACCEPT done fi - $ip6t -A INPUT -p udp --dport $standard_ntp_port -m conntrack --ctstate NEW -j ACCEPT + $ip6t -A INPUT -p udp --dport $standard_ntp_udp_port -m conntrack --ctstate NEW -j ACCEPT echo_done else echo_skipped diff --git a/ipt-firewall-gateway b/ipt-firewall-gateway index 5405e8b..e63fb43 100755 --- a/ipt-firewall-gateway +++ b/ipt-firewall-gateway @@ -4386,14 +4386,11 @@ fi echononl "\t\tNTP Service out only" if $allow_ntp_request_out ; then - for _dev in ${ext_if_arr[@]} ; do - $ipt -A OUTPUT -o $_dev -p udp --dport $standard_ntp_port -m conntrack --ctstate NEW -j ACCEPT - if $kernel_activate_forwarding && ! $permit_local_net_to_inet ; then - $ipt -A FORWARD -o $_dev -p udp --dport $standard_ntp_port -m conntrack --ctstate NEW -j ACCEPT - fi - done + # see : out_tcp_port_arr out_udp_port_arr at post_decalrations.conf + # echo_done + else echo_skipped fi @@ -4407,10 +4404,10 @@ echononl "\t\tNTP Service Gateway" if $local_ntp_service ; then if ! $allow_ntp_request_out ; then for _dev in ${ext_if_arr[@]} ; do - $ipt -A OUTPUT -o $_dev -p udp --dport $standard_ntp_port -m conntrack --ctstate NEW -j ACCEPT + $ipt -A OUTPUT -o $_dev -p udp --dport $standard_ntp_udp_port -m conntrack --ctstate NEW -j ACCEPT done fi - $ipt -A INPUT -p udp --dport $standard_ntp_port -m conntrack --ctstate NEW -j ACCEPT + $ipt -A INPUT -p udp --dport $standard_ntp_udp_port -m conntrack --ctstate NEW -j ACCEPT echo_done else echo_skipped