Shorewall: BLACKLISTNEWONLY=Yes to No. Allow blocking of existing connections

diff --git a/cookbooks/networking/templates/default/shorewall.conf.erb b/cookbooks/networking/templates/default/shorewall.conf.erb
index 14e0779db43e03da6977ca83bb6451105e9e0438..3ea0b71a2b30fd6add8c5994f44a9be8cf1c9ad9 100644 (file)
--- a/cookbooks/networking/templates/default/shorewall.conf.erb
+++ b/cookbooks/networking/templates/default/shorewall.conf.erb
@@ -117,7 +117,7 @@ MUTEX_TIMEOUT=60
 
 ADMINISABSENTMINDED=Yes
 
-BLACKLISTNEWONLY=Yes
+BLACKLISTNEWONLY=No
 
 DELAYBLACKLISTLOAD=No
 

diff --git a/cookbooks/networking/templates/default/shorewall6.conf.erb b/cookbooks/networking/templates/default/shorewall6.conf.erb
index 008fc6a9f8c6ff61d4145170322b8584d01efeb6..6f31ad6c80f436e8d4a08991d541b3e9828eb0a7 100644 (file)
--- a/cookbooks/networking/templates/default/shorewall6.conf.erb
+++ b/cookbooks/networking/templates/default/shorewall6.conf.erb
@@ -101,7 +101,7 @@ MUTEX_TIMEOUT=60
 
 ADMINISABSENTMINDED=Yes
 
-BLACKLISTNEWONLY=Yes
+BLACKLISTNEWONLY=No
 
 MODULE_SUFFIX=ko