diff mbox series

firewall: Remove unused CONNTRACK chain in raw table

Message ID 20210624174435.27079-1-michael.tremer@ipfire.org
State Accepted
Headers
Series firewall: Remove unused CONNTRACK chain in raw table |

Commit Message

Michael Tremer June 24, 2021, 5:44 p.m. UTC 
  Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
---
 src/initscripts/system/firewall | 2 --
 1 file changed, 2 deletions(-)

Comments

Peter Müller June 25, 2021, 7:55 a.m. UTC | #1 
Acked-by: Peter Müller <peter.mueller@ipfire.org>

> Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
> ---
>  src/initscripts/system/firewall | 2 --
>  1 file changed, 2 deletions(-)
> 
> diff --git a/src/initscripts/system/firewall b/src/initscripts/system/firewall
> index 1e558ee86..5ebbbfca6 100644
> --- a/src/initscripts/system/firewall
> +++ b/src/initscripts/system/firewall
> @@ -95,8 +95,6 @@ iptables_init() {
>  	iptables -A CONNTRACK -m conntrack --ctstate ESTABLISHED -j ACCEPT
>  	iptables -A CONNTRACK -m conntrack --ctstate INVALID -j DROP
>  	iptables -A CONNTRACK -p icmp -m conntrack --ctstate RELATED -j ACCEPT
> -	iptables -t raw -N CONNTRACK
> -	iptables -t raw -A PREROUTING -j CONNTRACK
>  
>  	# Conntrack helper (https://home.regit.org/netfilter-en/secure-use-of-helpers/)
>  
>
diff mbox series

Patch

diff --git a/src/initscripts/system/firewall b/src/initscripts/system/firewall
index 1e558ee86..5ebbbfca6 100644
--- a/src/initscripts/system/firewall
+++ b/src/initscripts/system/firewall
@@ -95,8 +95,6 @@  iptables_init() {
 	iptables -A CONNTRACK -m conntrack --ctstate ESTABLISHED -j ACCEPT
 	iptables -A CONNTRACK -m conntrack --ctstate INVALID -j DROP
 	iptables -A CONNTRACK -p icmp -m conntrack --ctstate RELATED -j ACCEPT
-	iptables -t raw -N CONNTRACK
-	iptables -t raw -A PREROUTING -j CONNTRACK
 
 	# Conntrack helper (https://home.regit.org/netfilter-en/secure-use-of-helpers/)