From 613b3220eff527da72ad112c01f51d765663c408 Mon Sep 17 00:00:00 2001
From: Daniel Berteaud <daniel@firewall-services.com>
Date: Thu, 2 May 2013 04:10:11 +0200
Subject: [PATCH] Only return after all the rules have been inserted, not
 between each rules (in masq templates)

---
 root/etc/e-smith/templates/etc/rc.d/init.d/masq/90adjustFail2Ban | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/root/etc/e-smith/templates/etc/rc.d/init.d/masq/90adjustFail2Ban b/root/etc/e-smith/templates/etc/rc.d/init.d/masq/90adjustFail2Ban
index 7657930..039a0db 100644
--- a/root/etc/e-smith/templates/etc/rc.d/init.d/masq/90adjustFail2Ban
+++ b/root/etc/e-smith/templates/etc/rc.d/init.d/masq/90adjustFail2Ban
@@ -16,9 +16,9 @@ EOF
             $OUT .= " -p $proto" if ($proto =~ m/^tcp|udp|icmp$/);
             $OUT .= " -m multiport --dports $port" if ($proto =~ m/^tcp|udp$/ && $port =~ m/^\d+(,\d+)*$/);
             $OUT .= " -j denylog\n";
-            $OUT .= "    /sbin/iptables --append  \$NEW_Fail2Ban" .
-                    " -j RETURN\n";
         }
+        $OUT .= "    /sbin/iptables --append  \$NEW_Fail2Ban" .
+                " -j RETURN\n";
     }
 
     # Having created a new Fail2Ban chain, activate it and destroy the old.