From 776bbd0d62440ab5c87bfe96c43f642e9d812472 Mon Sep 17 00:00:00 2001
From: Stephen Soltesz <soltesz@cs.princeton.edu>
Date: Wed, 12 Mar 2008 18:10:02 +0000
Subject: [PATCH] the proper addition belongs in iptables-config.  backed out
 the change in iptables.init.

---
 iptables-config | 2 +-
 iptables.init   | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/iptables-config b/iptables-config
index 80e37fb..8705fb9 100644
--- a/iptables-config
+++ b/iptables-config
@@ -3,7 +3,7 @@
 # Space separated list of nat helpers (e.g. 'ip_nat_ftp ip_nat_irc'), which
 # are loaded after the firewall rules are applied. Options for the helpers are
 # stored in /etc/modules.conf.
-#IPTABLES_MODULES=""
+IPTABLES_MODULES="ip_conntrack"
 
 # Unload modules on restart and stop
 #   Value: yes|no,  default: yes
diff --git a/iptables.init b/iptables.init
index 3b38aa8..5c99246 100755
--- a/iptables.init
+++ b/iptables.init
@@ -34,7 +34,7 @@ fi
     || NEW_MODUTILS=0
 
 # Default firewall configuration:
-IPTABLES_MODULES="ip_conntrack"
+IPTABLES_MODULES=""
 IPTABLES_MODULES_UNLOAD="yes"
 IPTABLES_SAVE_ON_STOP="no"
 IPTABLES_SAVE_ON_RESTART="no"
-- 
2.47.0