* [PATCH] firewall: Remove unused CONNTRACK chain in raw table
@ 2021-06-24 17:44 Michael Tremer
2021-06-25 7:55 ` Peter Müller
0 siblings, 1 reply; 2+ messages in thread
From: Michael Tremer @ 2021-06-24 17:44 UTC (permalink / raw)
To: development
[-- Attachment #1: Type: text/plain, Size: 762 bytes --]
Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org>
---
src/initscripts/system/firewall | 2 --
1 file changed, 2 deletions(-)
diff --git a/src/initscripts/system/firewall b/src/initscripts/system/firewall
index 1e558ee86..5ebbbfca6 100644
--- a/src/initscripts/system/firewall
+++ b/src/initscripts/system/firewall
@@ -95,8 +95,6 @@ iptables_init() {
iptables -A CONNTRACK -m conntrack --ctstate ESTABLISHED -j ACCEPT
iptables -A CONNTRACK -m conntrack --ctstate INVALID -j DROP
iptables -A CONNTRACK -p icmp -m conntrack --ctstate RELATED -j ACCEPT
- iptables -t raw -N CONNTRACK
- iptables -t raw -A PREROUTING -j CONNTRACK
# Conntrack helper (https://home.regit.org/netfilter-en/secure-use-of-helpers/)
--
2.20.1
^ permalink raw reply [flat|nested] 2+ messages in thread
* Re: [PATCH] firewall: Remove unused CONNTRACK chain in raw table
2021-06-24 17:44 [PATCH] firewall: Remove unused CONNTRACK chain in raw table Michael Tremer
@ 2021-06-25 7:55 ` Peter Müller
0 siblings, 0 replies; 2+ messages in thread
From: Peter Müller @ 2021-06-25 7:55 UTC (permalink / raw)
To: development
[-- Attachment #1: Type: text/plain, Size: 843 bytes --]
Acked-by: Peter Müller <peter.mueller(a)ipfire.org>
> Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org>
> ---
> src/initscripts/system/firewall | 2 --
> 1 file changed, 2 deletions(-)
>
> diff --git a/src/initscripts/system/firewall b/src/initscripts/system/firewall
> index 1e558ee86..5ebbbfca6 100644
> --- a/src/initscripts/system/firewall
> +++ b/src/initscripts/system/firewall
> @@ -95,8 +95,6 @@ iptables_init() {
> iptables -A CONNTRACK -m conntrack --ctstate ESTABLISHED -j ACCEPT
> iptables -A CONNTRACK -m conntrack --ctstate INVALID -j DROP
> iptables -A CONNTRACK -p icmp -m conntrack --ctstate RELATED -j ACCEPT
> - iptables -t raw -N CONNTRACK
> - iptables -t raw -A PREROUTING -j CONNTRACK
>
> # Conntrack helper (https://home.regit.org/netfilter-en/secure-use-of-helpers/)
>
>
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2021-06-25 7:55 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2021-06-24 17:44 [PATCH] firewall: Remove unused CONNTRACK chain in raw table Michael Tremer
2021-06-25 7:55 ` Peter Müller
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox