Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.user > #192934

Re: CT-based firewall rules?

Show all headers | View raw

On 2/23/2018 2:07 AM, Rodary Jacques wrote:
> When I reboot, what program  is responsible for  "CT-based  firewall rule" (dixit jounalctl). I would like to have my own firewall rules, and for now, I must flush those "CT-based  firewall rules" before  I set my owns.
> Again it's not too important, since I don't reboot very often, but I would appreciate not to have to spend quite a lot of time to change default setup each time I reboot.
> I already got rid of bind9.service (I have my own DNS config but I need named of course), Avahi-daemon package (I don't need multicast DNS).
> I know the good solution would be to build my own packages with my own choices, but I haven't the necessary knowledge.
> 

Are you talking about this message:

https://bbs.archlinux.org/viewtopic.php?id=224647

"nf_conntrack: default automatic helper assignment has been turned off 
for security reasons and CT-based  firewall rule not found. Use the 
iptables CT target to attach helpers instead."

It's always better to have the message in question! :)

As a dirty workaroungd, '/etc/rc.local' could be useful.

-- 
John Doe

Back to linux.debian.user | Previous | Next — Previous in thread | Find similar | Unroll thread

Thread

CT-based firewall rules? Rodary Jacques <rodaryj@free.fr> - 2018-02-23 02:10 +0100
  Re: CT-based firewall rules? john doe <johndoe65534@mail.com> - 2018-02-23 06:40 +0100

csiph-web