core155: Disable all connection tracking helpers

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

diff --git a/config/rootfiles/core/155/update.sh b/config/rootfiles/core/155/update.sh
index 5c7a3d3a9c761d0f3c6ad3d2c5d2616831afe41d..b0e8f9ad84a2a6c49f49057ac544b0897d8a9758 100644 (file)
--- a/config/rootfiles/core/155/update.sh
+++ b/config/rootfiles/core/155/update.sh
@@ -60,6 +60,10 @@ extract_files
 # update linker config
 ldconfig
 
+# Disable all connection tracking helper
+sed -E -e "s/^CONNTRACK_(.*?)=on/CONNTRACK_\1=off/g" \
+       -i /var/ipfire/firewall/optionsfw
+
 # Update Language cache
 /usr/local/bin/update-lang-cache