fix a problem with the firewall script (multicast traffic could produce packet loss)

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@6726 3c298f89-4303-0410-b956-a3cf2f4a3e73

diff --git a/package/iptables/files/firewall.init b/package/iptables/files/firewall.init
index 290bae1..310b0ec 100755 (executable)
--- a/package/iptables/files/firewall.init
+++ b/package/iptables/files/firewall.init
@@ -100,7 +100,7 @@ start() {
        # uses the default -P DROP
        
        ### MASQ
        # uses the default -P DROP
        
        ### MASQ

-       iptables -t nat -A PREROUTING -m state --state NEW -j NEW 
+       iptables -t nat -A PREROUTING -m state --state NEW -p tcp -j NEW 

        iptables -t nat -A PREROUTING -j prerouting_rule
        [ -z "$WAN" ] || iptables -t nat -A PREROUTING -i "$WAN" -j prerouting_wan
        iptables -t nat -A POSTROUTING -j postrouting_rule
        iptables -t nat -A PREROUTING -j prerouting_rule
        [ -z "$WAN" ] || iptables -t nat -A PREROUTING -i "$WAN" -j prerouting_wan
        iptables -t nat -A POSTROUTING -j postrouting_rule