From 1746b394f3fbb250afd11111a1523de4ee840760 Mon Sep 17 00:00:00 2001 From: Arne Fitzenreiter Date: Fri, 2 Jul 2021 07:53:24 +0200 Subject: [PATCH] firewall: remove conntrack_gre helper this is not exist in kernel-5.10 Signed-off-by: Arne Fitzenreiter --- src/initscripts/system/firewall | 5 ----- 1 file changed, 5 deletions(-) diff --git a/src/initscripts/system/firewall b/src/initscripts/system/firewall index 1e558ee86a..baa39abe13 100644 --- a/src/initscripts/system/firewall +++ b/src/initscripts/system/firewall @@ -98,11 +98,6 @@ iptables_init() { iptables -t raw -N CONNTRACK iptables -t raw -A PREROUTING -j CONNTRACK - # Conntrack helper (https://home.regit.org/netfilter-en/secure-use-of-helpers/) - - # GRE (always enabled) - modprobe nf_conntrack_proto_gre - # Fix for braindead ISPs iptables -A FORWARD -p tcp --tcp-flags SYN,RST SYN -j TCPMSS --clamp-mss-to-pmtu -- 2.39.5