Add ip_conntrack to the iptables init script to ensure that the connection
authorStephen Soltesz <soltesz@cs.princeton.edu>
Wed, 12 Mar 2008 18:03:53 +0000 (18:03 +0000)
committerStephen Soltesz <soltesz@cs.princeton.edu>
Wed, 12 Mar 2008 18:03:53 +0000 (18:03 +0000)
tracking is available.  VNET+ depends on this feature.

iptables.init

index 5c99246..3b38aa8 100755 (executable)
@@ -34,7 +34,7 @@ fi
     || NEW_MODUTILS=0
 
 # Default firewall configuration:
-IPTABLES_MODULES=""
+IPTABLES_MODULES="ip_conntrack"
 IPTABLES_MODULES_UNLOAD="yes"
 IPTABLES_SAVE_ON_STOP="no"
 IPTABLES_SAVE_ON_RESTART="no"