diff options
| author | sarthurdev <965089+sarthurdev@users.noreply.github.com> | 2023-08-26 23:02:10 +0200 |
|---|---|---|
| committer | sarthurdev <965089+sarthurdev@users.noreply.github.com> | 2023-08-26 23:20:22 +0200 |
| commit | 6b5d3568b88fad9cda694c0cd8b82c1f16773b15 (patch) | |
| tree | 22360fa716d82bcde58025885ed78c6acb5bae47 /data/vyos-firewall-init.conf | |
| parent | 75aa90cf2b234a34565d165697196ac9a304bb66 (diff) | |
| download | vyos-1x-6b5d3568b88fad9cda694c0cd8b82c1f16773b15.tar.gz vyos-1x-6b5d3568b88fad9cda694c0cd8b82c1f16773b15.zip | |
firewall: T5080: Disable conntrack unless required by rules
Diffstat (limited to 'data/vyos-firewall-init.conf')
| -rw-r--r-- | data/vyos-firewall-init.conf | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/data/vyos-firewall-init.conf b/data/vyos-firewall-init.conf index ab25ab4bd..41e7627f5 100644 --- a/data/vyos-firewall-init.conf +++ b/data/vyos-firewall-init.conf @@ -73,7 +73,7 @@ table raw { } chain FW_CONNTRACK { - accept + return } } @@ -109,6 +109,6 @@ table ip6 raw { } chain FW_CONNTRACK { - accept + return } } |