From: Grant Slater <git@firefishy.com>
Date: Fri, 5 Jul 2013 10:14:37 +0000 (+0100)
Subject: Shorewall: BLACKLISTNEWONLY=Yes to No. Allow blocking of existing connections
X-Git-Url: https://git.openstreetmap.org/chef.git/commitdiff_plain/38ed9c11c9d14a1dfac3b4b3dbc97f5dc9a4b7ad?ds=sidebyside

Shorewall: BLACKLISTNEWONLY=Yes to No. Allow blocking of existing connections
---

diff --git a/cookbooks/networking/templates/default/shorewall.conf.erb b/cookbooks/networking/templates/default/shorewall.conf.erb
index 14e0779db..3ea0b71a2 100644
--- a/cookbooks/networking/templates/default/shorewall.conf.erb
+++ b/cookbooks/networking/templates/default/shorewall.conf.erb
@@ -117,7 +117,7 @@ MUTEX_TIMEOUT=60
 
 ADMINISABSENTMINDED=Yes
 
-BLACKLISTNEWONLY=Yes
+BLACKLISTNEWONLY=No
 
 DELAYBLACKLISTLOAD=No
 
diff --git a/cookbooks/networking/templates/default/shorewall6.conf.erb b/cookbooks/networking/templates/default/shorewall6.conf.erb
index 008fc6a9f..6f31ad6c8 100644
--- a/cookbooks/networking/templates/default/shorewall6.conf.erb
+++ b/cookbooks/networking/templates/default/shorewall6.conf.erb
@@ -101,7 +101,7 @@ MUTEX_TIMEOUT=60
 
 ADMINISABSENTMINDED=Yes
 
-BLACKLISTNEWONLY=Yes
+BLACKLISTNEWONLY=No
 
 MODULE_SUFFIX=ko