[PATCH] firewall: Remove unused CONNTRACK chain in raw table

[PATCH] firewall: Remove unused CONNTRACK chain in raw table

[Michael Tremer]

[-- Attachment #1: Type: text/plain, Size: 762 bytes --]

Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org>
---
 src/initscripts/system/firewall | 2 --
 1 file changed, 2 deletions(-)

diff --git a/src/initscripts/system/firewall b/src/initscripts/system/firewall
index 1e558ee86..5ebbbfca6 100644
--- a/src/initscripts/system/firewall
+++ b/src/initscripts/system/firewall
@@ -95,8 +95,6 @@ iptables_init() {
 	iptables -A CONNTRACK -m conntrack --ctstate ESTABLISHED -j ACCEPT
 	iptables -A CONNTRACK -m conntrack --ctstate INVALID -j DROP
 	iptables -A CONNTRACK -p icmp -m conntrack --ctstate RELATED -j ACCEPT
-	iptables -t raw -N CONNTRACK
-	iptables -t raw -A PREROUTING -j CONNTRACK
 
 	# Conntrack helper (https://home.regit.org/netfilter-en/secure-use-of-helpers/)
 
-- 
2.20.1

Re: [PATCH] firewall: Remove unused CONNTRACK chain in raw table

[Peter Müller]

[-- Attachment #1: Type: text/plain, Size: 843 bytes --]

Acked-by: Peter Müller <peter.mueller(a)ipfire.org>

> Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org>
> ---
>  src/initscripts/system/firewall | 2 --
>  1 file changed, 2 deletions(-)
> 
> diff --git a/src/initscripts/system/firewall b/src/initscripts/system/firewall
> index 1e558ee86..5ebbbfca6 100644
> --- a/src/initscripts/system/firewall
> +++ b/src/initscripts/system/firewall
> @@ -95,8 +95,6 @@ iptables_init() {
>  	iptables -A CONNTRACK -m conntrack --ctstate ESTABLISHED -j ACCEPT
>  	iptables -A CONNTRACK -m conntrack --ctstate INVALID -j DROP
>  	iptables -A CONNTRACK -p icmp -m conntrack --ctstate RELATED -j ACCEPT
> -	iptables -t raw -N CONNTRACK
> -	iptables -t raw -A PREROUTING -j CONNTRACK
>  
>  	# Conntrack helper (https://home.regit.org/netfilter-en/secure-use-of-helpers/)
>  
>