From mboxrd@z Thu Jan 1 00:00:00 1970 From: Peter =?utf-8?q?M=C3=BCller?= To: development@lists.ipfire.org Subject: [PATCH] firewall: Ensure the xt_geoip module is always loaded Date: Sun, 30 Jan 2022 17:08:21 +0000 Message-ID: <3bbbc672-74d6-37b2-b122-aac537faa9ac@ipfire.org> MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="===============3740347184441504989==" List-Id: --===============3740347184441504989== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 8bit For some reason, this module is not present after the very first boot of an IPFire installation. Fixes: #12767 Reported-by: Arne Fitzenreiter Signed-off-by: Peter Müller --- src/initscripts/system/firewall | 3 +++ 1 file changed, 3 insertions(+) diff --git a/src/initscripts/system/firewall b/src/initscripts/system/firewall index ebc8168ae..bfab6d538 100644 --- a/src/initscripts/system/firewall +++ b/src/initscripts/system/firewall @@ -39,6 +39,9 @@ iptables_init() { iptables -P FORWARD DROP iptables -P OUTPUT ACCEPT + # Ensure the xt_geoip module is always loaded (#12767) + modprobe xt_geoip + # Enable TRACE logging to syslog modprobe nf_log_ipv4 sysctl -q -w net.netfilter.nf_log.2=nf_log_ipv4 -- 2.31.1 --===============3740347184441504989==--