Add: Allow all traffic from local ip to the internet

ipt-firewall-gateway

@@ -1532,6 +1532,34 @@ fi
 
 
 
+# ---
+# - Allow all traffic from local ip to the internet
+# ---
+
+echononl "\tAllow all traffic from local ip to the internet"
+
+if [[ ${#allow_local_ip_to_inet_arr[@]} -gt 0 ]] \
+      && $kernel_activate_forwarding ; then
+
+   for _ip in ${allow_local_ip_to_inet_arr[@]} ; do
+      $ipt -A FORWARD -p ALL -s $_ip -m conntrack --ctstate NEW -j ACCEPT
+
+      # - Note:
+      # - If (local) alias interfaces like eth1:0 in use, youe need a further
+      # - special rule.
+      # -
+      if $local_alias_interfaces ; then
+         $ipt -A FORWARD -p tcp -d $_ip --tcp-flag ACK ACK -j ACCEPT
+         $ipt -A FORWARD -p tcp -s $_ip --tcp-flag ACK ACK -j ACCEPT
+      fi
+   done
+   echo_done
+else
+   echo_skipped
+fi
+
+
+
 # ---
 # - Allow local services from given local networks
 # ---
@@ -1623,7 +1651,7 @@ if [[ ${#allow_local_ip_to_local_net_arr[@]} -gt 0 ]] \
          $ipt -A FORWARD -p tcp -s ${_val_arr[1]} --tcp-flag ACK ACK -j ACCEPT
       fi
    done
-   echo_ok
+   echo_done
 else
    echo_skipped
 fi
@@ -1688,7 +1716,7 @@ if [[ ${#allow_local_if_to_local_ip_arr[@]} -gt 0 ]] \
          $ipt -A FORWARD -p tcp -o ${_val_arr[0]} -s ${_val_arr[1]} --tcp-flag ACK ACK -j ACCEPT
       fi
    done
-   echo_ok
+   echo_done
 else
    echo_skipped
 fi