firewall: Ensure the xt_geoip module is always loaded

For some reason, this module is not present after the very first boot of
an IPFire installation.

Fixes: #12767
Reported-by: Arne Fitzenreiter <arne_f@ipfire.org>
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

diff --git a/src/initscripts/system/firewall b/src/initscripts/system/firewall
index 7d081bbc36678bbc35a656281b583f41f0ca7bcc..f35b6b6e18a9147e29a0b459ab6e2416a3335e2a 100644 (file)
--- a/src/initscripts/system/firewall
+++ b/src/initscripts/system/firewall
@@ -39,6 +39,9 @@ iptables_init() {
        iptables -P FORWARD DROP
        iptables -P OUTPUT ACCEPT
 
+       # Ensure the xt_geoip module is always loaded (#12767)
+       modprobe xt_geoip
+
        # Enable TRACE logging to syslog
        modprobe nf_log_ipv4
        sysctl -q -w net.netfilter.nf_log.2=nf_log_ipv4