slitaz-tools rev 804

/etc/slitaz/firewall.sh: use conntrack, state is obsolete
author Richard Dunbar <mojo@slitaz.org>
date Fri Apr 26 13:25:01 2013 +0000 (2013-04-26)
parents fc41098293ec
children a1290b22987c
files etc/slitaz/firewall.sh
line diff
     1.1 --- a/etc/slitaz/firewall.sh	Fri Apr 26 12:51:26 2013 +0000
     1.2 +++ b/etc/slitaz/firewall.sh	Fri Apr 26 13:25:01 2013 +0000
     1.3 @@ -20,10 +20,10 @@
     1.4  iptables -A INPUT -s $LOCAL_NETWORK -j ACCEPT
     1.5  
     1.6  # Accept near all output trafic.
     1.7 -iptables -A OUTPUT -m state --state NEW,ESTABLISHED,RELATED -j ACCEPT
     1.8 +iptables -A OUTPUT -m conntrack --ctstate NEW,ESTABLISHED,RELATED -j ACCEPT
     1.9  
    1.10  # Accept input trafic only for connections initialized by user.
    1.11 -iptables -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
    1.12 +iptables -A INPUT -m conntrack  --ctstate RELATED,ESTABLISHED -j ACCEPT
    1.13  
    1.14  # If you manage a HTTP/SSH/FTP/IRC server you can accept input for
    1.15  # non-established connections an some ports. Else you can disable the