diff options
author | Christian Breunig <christian@breunig.cc> | 2023-08-27 12:33:15 +0200 |
---|---|---|
committer | GitHub <noreply@github.com> | 2023-08-27 12:33:15 +0200 |
commit | d3edda22573fb9c9d1c469f14f5a3eec9ca512a5 (patch) | |
tree | c6118e7d1dc94b2963f69b7c504738320fb0a809 /data/vyos-firewall-init.conf | |
parent | 904cbe448c578905c9af1d15059f2905c490e409 (diff) | |
parent | 6b5d3568b88fad9cda694c0cd8b82c1f16773b15 (diff) | |
download | vyos-1x-d3edda22573fb9c9d1c469f14f5a3eec9ca512a5.tar.gz vyos-1x-d3edda22573fb9c9d1c469f14f5a3eec9ca512a5.zip |
Merge pull request #2176 from sarthurdev/T5080
firewall: T5080: Disable conntrack unless required by rules
Diffstat (limited to 'data/vyos-firewall-init.conf')
-rw-r--r-- | data/vyos-firewall-init.conf | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/data/vyos-firewall-init.conf b/data/vyos-firewall-init.conf index ab25ab4bd..41e7627f5 100644 --- a/data/vyos-firewall-init.conf +++ b/data/vyos-firewall-init.conf @@ -73,7 +73,7 @@ table raw { } chain FW_CONNTRACK { - accept + return } } @@ -109,6 +109,6 @@ table ip6 raw { } chain FW_CONNTRACK { - accept + return } } |