#----------------------------------------------------------------------------
# /etc/rc.d/fwrules.post.stunnel
#
# Last Update:  $Id$
#
# This script automatically configure the IPv4 packet filter such that
# incoming stunnel connections are accepted. A manual packet filter
# configuration in config/base.txt is therefore not necessary.
#----------------------------------------------------------------------------

if [ "$OPT_STUNNEL" = "yes" ]
then
    add_chain in-stunnel-ports
    add_rule filter INPUT 'in-stunnel-ports' "stunnel access"

    add_chain out-stunnel-ports
    add_rule filter OUTPUT 'out-stunnel-ports' "stunnel access"
fi