# $Header: /global/src/etc/cl-manage-scripts/patches/RCS/P-ip6tables-allow-ESTABLISHED,v 1.3 2010/10/21 05:32:49 pb22 Exp $
# patch to allow ESTABLISHED calls -- assume its omission was a typo. ??
# patch-file matches : ESTABLISHED
# patch-file ~istmatches = Fedora|CentOS|Red.Hat.Enterprise.Linux
# patch-file distmatches = NONE_PRO_TEM
# Process using /usr/bin/cl-patch-file unless matching the above
--- /etc/sysconfig/ip6tables	2008-03-06 06:06:37.000000000 +0000
+++ /etc/sysconfig/ip6tables	2008-03-06 06:12:45.000000000 +0000
@@ -19,2 +19,4 @@
 #A RH-Firewall-1-INPUT -p tcp -m tcp --dport 631 -j ACCEPT
+#1 cl.cam.ac.uk: allow ESTABLISHED calls - amazingly the default appears not to!
+-A RH-Firewall-1-INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
 #5 Allow ssh from within the Lab, but block repeated calls from outside (i.e. 3 / 80s)

