firewall: Add IRC to the conntrack helpers

This commit is contained in:
Michael Tremer
2015-05-12 13:27:24 +02:00
parent a93bf69617
commit 50354ffe3a
2 changed files with 8 additions and 1 deletions

View File

@@ -136,7 +136,7 @@ $(TARGET) :
echo "POLICY1=MODE2" >> $(CONFIG_ROOT)/firewall/settings
# Add conntrack helper default settings
for proto in AMANDA FTP PPTP SIP TFTP; do \
for proto in AMANDA FTP IRC PPTP SIP TFTP; do \
echo "CONNTRACK_$${proto}=on" >> $(CONFIG_ROOT)/optionsfw/settings; \
done

View File

@@ -126,6 +126,13 @@ iptables_init() {
iptables -t raw -A CONNTRACK -p udp --dport 69 -j CT --helper tftp
fi
# IRC
if [ "${CONNTRACK_IRC}" = "on" ]; then
iptables -A CONNTRACK -m conntrack --ctstate RELATED \
-m helper --helper irc -j ACCEPT
iptables -t raw -A CONNTRACK -p tcp --dport 6667 -j CT --helper irc
fi
# Amanda
if [ "${CONNTRACK_AMANDA}" = "on" ]; then
iptables -A CONNTRACK -m conntrack --ctstate RELATED \