From: mh <mh@immerda.ch>
Date: Thu, 22 Dec 2011 21:35:45 +0000 (+0100)
Subject: bring a few things in line with the old config file
X-Git-Url: https://gitweb.fluxo.info/?a=commitdiff_plain;h=26f7cfbbaa3cea68a6d668b00d956c605ae7cd84;p=puppet-shorewall.git

bring a few things in line with the old config file
---

diff --git a/files/shorewall.conf.CentOS.6 b/files/shorewall.conf.CentOS.6
index 989af13..8998d81 100644
--- a/files/shorewall.conf.CentOS.6
+++ b/files/shorewall.conf.CentOS.6
@@ -118,7 +118,7 @@ COMPLETE=No
 
 DELETE_THEN_ADD=Yes
 
-DETECT_DNAT_IPADDRS=No
+DETECT_DNAT_IPADDRS=YES
 
 DISABLE_IPV6=Yes
 
@@ -134,7 +134,7 @@ FASTACCEPT=No
 
 FORWARD_CLEAR_MARK=
 
-IMPLICIT_CONTINUE=No
+IMPLICIT_CONTINUE=Yes
 
 HIGH_ROUTE_MARKS=No
 
@@ -146,7 +146,7 @@ LEGACY_FASTSTART=Yes
 
 LOAD_HELPERS_ONLY=No
 
-MACLIST_TABLE=filter
+MACLIST_TABLE=mangle
 
 MACLIST_TTL=