firewall: Ensure the xt_geoip module is always loaded

For some reason, this module is not present after the very first boot of
an IPFire installation.

Fixes: #12767

Reported-by: Arne Fitzenreiter <arne_f@ipfire.org>
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
This commit is contained in:
Peter Müller
2022-01-30 17:08:21 +00:00
committed by Arne Fitzenreiter
parent 0c0784f4b5
commit 816b0e08c6

View File

@@ -39,6 +39,9 @@ iptables_init() {
iptables -P FORWARD DROP
iptables -P OUTPUT ACCEPT
# Ensure the xt_geoip module is always loaded (#12767)
modprobe xt_geoip
# Enable TRACE logging to syslog
modprobe nf_log_ipv4
sysctl -q -w net.netfilter.nf_log.2=nf_log_ipv4