this is not exist in kernel-5.10
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
iptables -t raw -N CONNTRACK
iptables -t raw -A PREROUTING -j CONNTRACK
iptables -t raw -N CONNTRACK
iptables -t raw -A PREROUTING -j CONNTRACK
- # Conntrack helper (https://home.regit.org/netfilter-en/secure-use-of-helpers/)
-
- # GRE (always enabled)
- modprobe nf_conntrack_proto_gre
-
# Fix for braindead ISPs
iptables -A FORWARD -p tcp --tcp-flags SYN,RST SYN -j TCPMSS --clamp-mss-to-pmtu
# Fix for braindead ISPs
iptables -A FORWARD -p tcp --tcp-flags SYN,RST SYN -j TCPMSS --clamp-mss-to-pmtu