From 816b0e08c68a63d61bb98adf0b6236b6578115d2 Mon Sep 17 00:00:00 2001
From: =?utf8?q?Peter=20M=C3=BCller?= <peter.mueller@ipfire.org>
Date: Sun, 30 Jan 2022 17:08:21 +0000
Subject: [PATCH] firewall: Ensure the xt_geoip module is always loaded
MIME-Version: 1.0
Content-Type: text/plain; charset=utf8
Content-Transfer-Encoding: 8bit

For some reason, this module is not present after the very first boot of
an IPFire installation.

Fixes: #12767

Reported-by: Arne Fitzenreiter <arne_f@ipfire.org>
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
---
 src/initscripts/system/firewall | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/src/initscripts/system/firewall b/src/initscripts/system/firewall
index 7d081bbc36..f35b6b6e18 100644
--- a/src/initscripts/system/firewall
+++ b/src/initscripts/system/firewall
@@ -39,6 +39,9 @@ iptables_init() {
 	iptables -P FORWARD DROP
 	iptables -P OUTPUT ACCEPT
 
+	# Ensure the xt_geoip module is always loaded (#12767)
+	modprobe xt_geoip
+
 	# Enable TRACE logging to syslog
 	modprobe nf_log_ipv4
 	sysctl -q -w net.netfilter.nf_log.2=nf_log_ipv4
-- 
2.39.5