Author: nbd
Date: 2014-08-07 21:31:19 +0200 (Thu, 07 Aug 2014)
New Revision: 42051

Modified:
   branches/barrier_breaker/package/base-files/files/etc/sysctl.conf
Log:
base-files: enable option to skip the netfilter "filter" table for established 
connection packets by default

Signed-off-by: Felix Fietkau <[email protected]>

Backport of r42048

Modified: branches/barrier_breaker/package/base-files/files/etc/sysctl.conf
===================================================================
--- branches/barrier_breaker/package/base-files/files/etc/sysctl.conf   
2014-08-07 19:31:18 UTC (rev 42050)
+++ branches/barrier_breaker/package/base-files/files/etc/sysctl.conf   
2014-08-07 19:31:19 UTC (rev 42051)
@@ -21,6 +21,7 @@
 net.netfilter.nf_conntrack_tcp_timeout_established=7440
 net.netfilter.nf_conntrack_udp_timeout=60
 net.netfilter.nf_conntrack_udp_timeout_stream=180
+net.netfilter.nf_conntrack_skip_filter=1
 
 # disable bridge firewalling by default
 net.bridge.bridge-nf-call-arptables=0
_______________________________________________
openwrt-commits mailing list
[email protected]
https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-commits

Reply via email to