firewall: Remove unused CONNTRACK chain in raw table
Commit Message
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
---
src/initscripts/system/firewall | 2 --
1 file changed, 2 deletions(-)
Comments
Acked-by: Peter Müller <peter.mueller@ipfire.org>
> Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
> ---
> src/initscripts/system/firewall | 2 --
> 1 file changed, 2 deletions(-)
>
> diff --git a/src/initscripts/system/firewall b/src/initscripts/system/firewall
> index 1e558ee86..5ebbbfca6 100644
> --- a/src/initscripts/system/firewall
> +++ b/src/initscripts/system/firewall
> @@ -95,8 +95,6 @@ iptables_init() {
> iptables -A CONNTRACK -m conntrack --ctstate ESTABLISHED -j ACCEPT
> iptables -A CONNTRACK -m conntrack --ctstate INVALID -j DROP
> iptables -A CONNTRACK -p icmp -m conntrack --ctstate RELATED -j ACCEPT
> - iptables -t raw -N CONNTRACK
> - iptables -t raw -A PREROUTING -j CONNTRACK
>
> # Conntrack helper (https://home.regit.org/netfilter-en/secure-use-of-helpers/)
>
>
@@ -95,8 +95,6 @@ iptables_init() {
iptables -A CONNTRACK -m conntrack --ctstate ESTABLISHED -j ACCEPT
iptables -A CONNTRACK -m conntrack --ctstate INVALID -j DROP
iptables -A CONNTRACK -p icmp -m conntrack --ctstate RELATED -j ACCEPT
- iptables -t raw -N CONNTRACK
- iptables -t raw -A PREROUTING -j CONNTRACK
# Conntrack helper (https://home.regit.org/netfilter-en/secure-use-of-helpers/)