From 55bd9d4335ecdb2e1929aaebeb3da1fab35db853 Mon Sep 17 00:00:00 2001
From: Christoph <ckubu@oopen.de>
Date: Sun, 19 May 2019 18:30:18 +0200
Subject: [PATCH] Fix error forwarding private networks.

---
 ip6t-firewall-server | 8 +++++---
 ipt-firewall-server  | 8 +++++---
 2 files changed, 10 insertions(+), 6 deletions(-)

diff --git a/ip6t-firewall-server b/ip6t-firewall-server
index 81d72e1..b6a45dc 100755
--- a/ip6t-firewall-server
+++ b/ip6t-firewall-server
@@ -504,14 +504,16 @@ fi
 if [[ ${#forward_private_ip_arr[@]} -gt 0 ]] ; then
    echononl "\tAllow forwarding (private) IPs / IP-Ranges.."
    for _ip in ${forward_private_ip_arr[@]}; do
+      $ip6t -A OUTPUT -d $_ip -j ACCEPT
+      $ip6t -A INPUT -s $_ip -j ACCEPT
       if $kernel_forward_between_interfaces ; then
          $ip6t -A FORWARD -d $_ip -j ACCEPT
          $ip6t -A FORWARD -s $_ip -j ACCEPT
-         echo_done
-      else
-         echo_skipped
       fi
    done
+   echo_done
+else
+   echo_skipped
 fi
    
 
diff --git a/ipt-firewall-server b/ipt-firewall-server
index cd6dbc0..ab71089 100755
--- a/ipt-firewall-server
+++ b/ipt-firewall-server
@@ -629,14 +629,16 @@ fi
 if [[ ${#forward_private_ip_arr[@]} -gt 0 ]] ; then
    echononl "\tAllow forwarding (private) IPs / IP-Ranges.."
    for _ip in ${forward_private_ip_arr[@]}; do
+      $ipt -A OUTPUT -d $_ip -j ACCEPT
+      $ipt -A INPUT -s $_ip -j ACCEPT
       if $kernel_activate_forwarding ; then
          $ipt -A FORWARD -d $_ip -j ACCEPT
          $ipt -A FORWARD -s $_ip -j ACCEPT
-         echo_done
-      else
-         echo_skipped
       fi
    done
+   echo_done
+else
+   echo_skipped
 fi