Support for inactive devices added in IPHandler.

[software/pymin.git] / pymin / services / firewall / templates / iptables.sh

diff --git a/pymin/services/firewall/templates/iptables.sh b/pymin/services/firewall/templates/iptables.sh
index 57dacd5937a1343099f405f31c682d6ec02416f5..80f4a323995ffe7eb9331a0e35bfed4b5e1656ce 100644 (file)
--- a/pymin/services/firewall/templates/iptables.sh
+++ b/pymin/services/firewall/templates/iptables.sh
@@ -13,8 +13,14 @@ def optional(switch, value):
 
 %>
 
 
 %>
 

+/usr/sbin/iptables -t filter -F
+
+/usr/sbin/iptables -t filter -P INPUT ACCEPT
+/usr/sbin/iptables -t filter -P OUTPUT ACCEPT
+/usr/sbin/iptables -t filter -P FORWARD ACCEPT
+

 % for (index, rule) in enumerate(rules):
 % for (index, rule) in enumerate(rules):

-/sbin/iptables -t filter \
+/usr/sbin/iptables -t filter \

     -I ${rule.chain|s} ${index+1|s} \
     -j ${rule.target|s} \
     ${optional('-s', rule.src)} \
     -I ${rule.chain|s} ${index+1|s} \
     -j ${rule.target|s} \
     ${optional('-s', rule.src)} \