From: Michael Tremer <michael.tremer@ipfire.org>
Date: Tue, 2 Mar 2021 18:35:13 +0000 (+0000)
Subject: core155: Disable all connection tracking helpers
X-Git-Tag: v2.25-core155~52
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=4eaa5b91763762e59f8456305bc15922ec92e370;p=ipfire-2.x.git

core155: Disable all connection tracking helpers

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
---

diff --git a/config/rootfiles/core/155/update.sh b/config/rootfiles/core/155/update.sh
index 5c7a3d3a9c..b0e8f9ad84 100644
--- a/config/rootfiles/core/155/update.sh
+++ b/config/rootfiles/core/155/update.sh
@@ -60,6 +60,10 @@ extract_files
 # update linker config
 ldconfig
 
+# Disable all connection tracking helper
+sed -E -e "s/^CONNTRACK_(.*?)=on/CONNTRACK_\1=off/g" \
+	-i /var/ipfire/firewall/optionsfw
+
 # Update Language cache
 /usr/local/bin/update-lang-cache