===================================================================
RCS file: /home/cvsd/home/cvs/scripts/shell/firewall/fw-universal.sh,v
retrieving revision 2.94
retrieving revision 2.95
diff -u -p -r2.94 -r2.95
--- scripts/shell/firewall/fw-universal.sh	2013/09/21 02:57:58	2.94
+++ scripts/shell/firewall/fw-universal.sh	2013/09/21 03:01:24	2.95
@@ -22,7 +22,7 @@
 # Licensed under terms of GNU General Public License.
 # All rights reserved.
 #
-# $Platon: scripts/shell/firewall/fw-universal.sh,v 2.93 2013-09-21 02:55:50 nepto Exp $
+# $Platon: scripts/shell/firewall/fw-universal.sh,v 2.94 2013-09-21 02:57:58 nepto Exp $
 #
 # Changelog:
 # 2003-10-24 - created
@@ -465,9 +465,6 @@ masquerade()
 		return;
 	fi
 
-	print_info -en "NAT: Enabling packet forwarding..."
-	echo 1 > /proc/sys/net/ipv4/ip_forward
-	print_info " done."
 	print_info -en "NAT: Masquerading local subnet: $NAT_SUBNET_IFACE --> $NAT_LAN_IFACE"
 
 	if [ "X$XEN_MODE" = "Xon" ]; then
@@ -1751,10 +1748,10 @@ case "$1" in
 		allow_icmp
 		accept_loopback
 		masquerade
+		forward_on
 		log_input_drop
 		log_output_drop
 		log_forward_drop
-		forward_on
 		do_ip_accounting
 		shaping_off
 		shaping_on