Changeset 2618 for trunk/server/fedora/config/etc/sysconfig/ip6tables

Timestamp:

Sep 22, 2014, 6:45:42 PM (9 years ago)

Author:

andersk

Message:

ip[6]tables: Really ignore SMTP to localhost

Packets in OUTPUT have an output interface, not an input interface.

File:

• trunk/server/fedora/config/etc/sysconfig/ip6tables (modified) (1 diff)

trunk/server/fedora/config/etc/sysconfig/ip6tables

@@ -4 +4 @@
 :OUTPUT ACCEPT [0:0]
 :log-smtp - [0:0]
--A log-smtp -i lo -j RETURN
+-A log-smtp -o lo -j RETURN
 -A OUTPUT -p tcp -m tcp --dport 25 --tcp-flags FIN,SYN,RST,ACK SYN -j log-smtp
 -A log-smtp -m owner --uid-owner postfix -j RETURN