From mboxrd@z Thu Jan  1 00:00:00 1970
From: Peter =?utf-8?q?M=C3=BCller?= <peter.mueller@ipfire.org>
To: development@lists.ipfire.org
Subject: Re: [PATCH] firewall: Remove unused CONNTRACK chain in raw table
Date: Fri, 25 Jun 2021 09:55:33 +0200
Message-ID: <2787db40-7b35-9a30-c1d4-57cd9b749a6d@ipfire.org>
In-Reply-To: <20210624174435.27079-1-michael.tremer@ipfire.org>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="===============3824504636001691237=="
List-Id: <development.lists.ipfire.org>

--===============3824504636001691237==
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

Acked-by: Peter M=C3=BCller <peter.mueller(a)ipfire.org>

> Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org>
> ---
>  src/initscripts/system/firewall | 2 --
>  1 file changed, 2 deletions(-)
>=20
> diff --git a/src/initscripts/system/firewall b/src/initscripts/system/firew=
all
> index 1e558ee86..5ebbbfca6 100644
> --- a/src/initscripts/system/firewall
> +++ b/src/initscripts/system/firewall
> @@ -95,8 +95,6 @@ iptables_init() {
>  	iptables -A CONNTRACK -m conntrack --ctstate ESTABLISHED -j ACCEPT
>  	iptables -A CONNTRACK -m conntrack --ctstate INVALID -j DROP
>  	iptables -A CONNTRACK -p icmp -m conntrack --ctstate RELATED -j ACCEPT
> -	iptables -t raw -N CONNTRACK
> -	iptables -t raw -A PREROUTING -j CONNTRACK
> =20
>  	# Conntrack helper (https://home.regit.org/netfilter-en/secure-use-of-hel=
pers/)
> =20
>=20

--===============3824504636001691237==--