summaryrefslogtreecommitdiff
path: root/scripts/firewall/firewall.init.in
diff options
context:
space:
mode:
authorGaurav Sinha <gaurav.sinha@vyatta.com>2012-05-14 13:23:22 -0700
committerGaurav Sinha <gaurav.sinha@vyatta.com>2012-05-14 13:23:22 -0700
commitfcd91bbdc7cfcc87830d8fec6c3e4adfb78cdcfc (patch)
tree3e48cd3642abdeeaf8a852206fa98506094e1db0 /scripts/firewall/firewall.init.in
parentbabf4c5164565f4477c293d3d7a419e043ba75e3 (diff)
downloadvyatta-cfg-firewall-fcd91bbdc7cfcc87830d8fec6c3e4adfb78cdcfc.tar.gz
vyatta-cfg-firewall-fcd91bbdc7cfcc87830d8fec6c3e4adfb78cdcfc.zip
don't add CTHELPER chain by default on boot. add when needed.
Diffstat (limited to 'scripts/firewall/firewall.init.in')
-rw-r--r--scripts/firewall/firewall.init.in2
1 files changed, 0 insertions, 2 deletions
diff --git a/scripts/firewall/firewall.init.in b/scripts/firewall/firewall.init.in
index 3052238..d7364fe 100644
--- a/scripts/firewall/firewall.init.in
+++ b/scripts/firewall/firewall.init.in
@@ -58,8 +58,6 @@ start () {
iptables -t raw -N VYATTA_CT_HELPER
iptables -t raw -A VYATTA_CT_HELPER -j RETURN
- iptables -t raw -A PREROUTING -j VYATTA_CT_HELPER
- iptables -t raw -A OUTPUT -j VYATTA_CT_HELPER
# setup vrrp backup transition chain
# we need to filter traffic to the vrrp mac addresses
# on the vrrp backup router before we do anything else.