Re: [PATCH] firewall: Remove unused CONNTRACK chain in raw table

Acked-by: Peter Müller peter.mueller@ipfire.org

Signed-off-by: Michael Tremer michael.tremer@ipfire.org

src/initscripts/system/firewall | 2 -- 1 file changed, 2 deletions(-)

diff --git a/src/initscripts/system/firewall b/src/initscripts/system/firewall index 1e558ee86..5ebbbfca6 100644 --- a/src/initscripts/system/firewall +++ b/src/initscripts/system/firewall @@ -95,8 +95,6 @@ iptables_init() { iptables -A CONNTRACK -m conntrack --ctstate ESTABLISHED -j ACCEPT iptables -A CONNTRACK -m conntrack --ctstate INVALID -j DROP iptables -A CONNTRACK -p icmp -m conntrack --ctstate RELATED -j ACCEPT

• iptables -t raw -N CONNTRACK

• iptables -t raw -A PREROUTING -j CONNTRACK

  # Conntrack helper (https://home.regit.org/netfilter-en/secure-use-of-helpers/)