From 91a29ffc1607a430ad0b00d0559e3d55bdfad601 Mon Sep 17 00:00:00 2001 From: Michael Tremer Date: Thu, 24 Jun 2021 17:44:35 +0000 Subject: [PATCH] firewall: Remove unused CONNTRACK chain in raw table MIME-Version: 1.0 Content-Type: text/plain; charset=utf8 Content-Transfer-Encoding: 8bit Signed-off-by: Michael Tremer Acked-by: Peter Müller --- src/initscripts/system/firewall | 2 -- 1 file changed, 2 deletions(-) diff --git a/src/initscripts/system/firewall b/src/initscripts/system/firewall index 776e70d6ee..75ea8abdfe 100644 --- a/src/initscripts/system/firewall +++ b/src/initscripts/system/firewall @@ -112,8 +112,6 @@ iptables_init() { iptables -A CONNTRACK -m conntrack --ctstate ESTABLISHED -j ACCEPT iptables -A CONNTRACK -m conntrack --ctstate INVALID -j DROP iptables -A CONNTRACK -p icmp -m conntrack --ctstate RELATED -j ACCEPT - iptables -t raw -N CONNTRACK - iptables -t raw -A PREROUTING -j CONNTRACK # Restore any connection marks iptables -t mangle -A PREROUTING -j CONNMARK --restore-mark -- 2.39.5