From mboxrd@z Thu Jan 1 00:00:00 1970 From: Michael Tremer To: development@lists.ipfire.org Subject: [PATCH] firewall: Remove unused CONNTRACK chain in raw table Date: Thu, 24 Jun 2021 17:44:35 +0000 Message-ID: <20210624174435.27079-1-michael.tremer@ipfire.org> MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="===============3149235062441360424==" List-Id: --===============3149235062441360424== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Signed-off-by: Michael Tremer --- src/initscripts/system/firewall | 2 -- 1 file changed, 2 deletions(-) diff --git a/src/initscripts/system/firewall b/src/initscripts/system/firewall index 1e558ee86..5ebbbfca6 100644 --- a/src/initscripts/system/firewall +++ b/src/initscripts/system/firewall @@ -95,8 +95,6 @@ iptables_init() { iptables -A CONNTRACK -m conntrack --ctstate ESTABLISHED -j ACCEPT iptables -A CONNTRACK -m conntrack --ctstate INVALID -j DROP iptables -A CONNTRACK -p icmp -m conntrack --ctstate RELATED -j ACCEPT - iptables -t raw -N CONNTRACK - iptables -t raw -A PREROUTING -j CONNTRACK =20 # Conntrack helper (https://home.regit.org/netfilter-en/secure-use-of-helpe= rs/) =20 --=20 2.20.1 --===============3149235062441360424==--