rendered paste bodyIndex: configs/fw/fw1.ferm
===================================================================
--- configs/fw/fw1.ferm (revision 1035)
+++ configs/fw/fw1.ferm (working copy)
@@ -171,6 +171,7 @@
chain IN_EXT1_TO_ME {
proto tcp sport 513: dport 22 ACCEPT;
+ proto udp sport (1024:) dport 1194 ACCEPT;
proto icmp icmp-type echo-request ACCEPT;
}
@@ -520,6 +521,9 @@
}
chain SHAPING {
+ proto udp {
+ dport 1194 daddr $GATEWAY MARK set-mark 10;
+ }
proto tcp {
sport 22 saddr ! $DEV MARK set-mark 10;
dport 22 daddr ! $DEV MARK set-mark 10;