summaryrefslogtreecommitdiff
path: root/data/vyos-firewall-init.conf
diff options
context:
space:
mode:
authorChristian Breunig <christian@breunig.cc>2023-08-27 12:33:15 +0200
committerGitHub <noreply@github.com>2023-08-27 12:33:15 +0200
commitd3edda22573fb9c9d1c469f14f5a3eec9ca512a5 (patch)
treec6118e7d1dc94b2963f69b7c504738320fb0a809 /data/vyos-firewall-init.conf
parent904cbe448c578905c9af1d15059f2905c490e409 (diff)
parent6b5d3568b88fad9cda694c0cd8b82c1f16773b15 (diff)
downloadvyos-1x-d3edda22573fb9c9d1c469f14f5a3eec9ca512a5.tar.gz
vyos-1x-d3edda22573fb9c9d1c469f14f5a3eec9ca512a5.zip
Merge pull request #2176 from sarthurdev/T5080
firewall: T5080: Disable conntrack unless required by rules
Diffstat (limited to 'data/vyos-firewall-init.conf')
-rw-r--r--data/vyos-firewall-init.conf4
1 files changed, 2 insertions, 2 deletions
diff --git a/data/vyos-firewall-init.conf b/data/vyos-firewall-init.conf
index ab25ab4bd..41e7627f5 100644
--- a/data/vyos-firewall-init.conf
+++ b/data/vyos-firewall-init.conf
@@ -73,7 +73,7 @@ table raw {
}
chain FW_CONNTRACK {
- accept
+ return
}
}
@@ -109,6 +109,6 @@ table ip6 raw {
}
chain FW_CONNTRACK {
- accept
+ return
}
}