firewall: Make conntrack helpers configurable

[people/pmueller/ipfire-2.x.git] / lfs / configroot

diff --git a/lfs/configroot b/lfs/configroot
index 601cdf6d38a22d7ef0899c203359f3742682e078..26583a4eac39345a3201da2d176f5764021c10fa 100644 (file)
--- a/lfs/configroot
+++ b/lfs/configroot
@@ -135,6 +135,11 @@ $(TARGET) :
        echo  "POLICY=MODE2"            >> $(CONFIG_ROOT)/firewall/settings
        echo  "POLICY1=MODE2"           >> $(CONFIG_ROOT)/firewall/settings
 
+       # Add conntrack helper default settings
+       for proto in FTP PPTP SIP TFTP; do \
+               echo "CONNTRACK_$${proto}=on" >> $(CONFIG_ROOT)/optionsfw/settings; \
+       done
+
        # set converters executable
        chmod 755 /usr/sbin/convert-*