echo "POLICY1=MODE2" >> $(CONFIG_ROOT)/firewall/settings
# Add conntrack helper default settings
- for proto in FTP PPTP SIP TFTP; do \
+ for proto in AMANDA FTP PPTP SIP TFTP; do \
echo "CONNTRACK_$${proto}=on" >> $(CONFIG_ROOT)/optionsfw/settings; \
done
iptables -t raw -A CONNTRACK -p udp --dport 69 -j CT --helper tftp
fi
+ # Amanda
+ if [ "${CONNTRACK_AMANDA}" = "on" ]; then
+ iptables -A CONNTRACK -m conntrack --ctstate RELATED \
+ -m helper --helper amanda -j ACCEPT
+ iptables -t raw -A CONNTRACK -j CT --helper amanda
+ fi
+
# Fix for braindead ISP's
iptables -A FORWARD -p tcp --tcp-flags SYN,RST SYN -j TCPMSS --clamp-mss-to-pmtu