firewall: Remove unused CONNTRACK chain in raw table

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Acked-by: Peter Müller <peter.mueller@ipfire.org>
This commit is contained in:
Michael Tremer
2021-06-24 17:44:35 +00:00
committed by Arne Fitzenreiter
parent fddcbfd4f5
commit 91a29ffc16

View File

@@ -112,8 +112,6 @@ iptables_init() {
iptables -A CONNTRACK -m conntrack --ctstate ESTABLISHED -j ACCEPT
iptables -A CONNTRACK -m conntrack --ctstate INVALID -j DROP
iptables -A CONNTRACK -p icmp -m conntrack --ctstate RELATED -j ACCEPT
iptables -t raw -N CONNTRACK
iptables -t raw -A PREROUTING -j CONNTRACK
# Restore any connection marks
iptables -t mangle -A PREROUTING -j CONNMARK --restore-mark