- echo "POLICY=MODE2" >> $(CONFIG_ROOT)/forward/settings
- echo "POLICY1=MODE2" >> $(CONFIG_ROOT)/forward/settings
-
- # set rules.pl executable
- chmod 755 $(CONFIG_ROOT)/forward/bin/rules.pl
-
+ echo "POLICY=MODE2" >> $(CONFIG_ROOT)/firewall/settings
+ echo "POLICY1=MODE2" >> $(CONFIG_ROOT)/firewall/settings
+
+ # Add conntrack helper default settings
+ for proto in FTP H323 IRC SIP TFTP; do \
+ echo "CONNTRACK_$${proto}=on" >> $(CONFIG_ROOT)/optionsfw/settings; \
+ done
+
+ # Do not enable these by default because these are broken
+ for proto in AMANDA PPTP; do \
+ echo "CONNTRACK_$${proto}=off" >> $(CONFIG_ROOT)/optionsfw/settings; \
+ done
+