the proper addition belongs in iptables-config. backed out the change in

iptables.init.

diff --git a/iptables-config b/iptables-config
index 80e37fb..8705fb9 100644 (file)
--- a/iptables-config
+++ b/iptables-config
@@ -3,7 +3,7 @@
 # Space separated list of nat helpers (e.g. 'ip_nat_ftp ip_nat_irc'), which
 # are loaded after the firewall rules are applied. Options for the helpers are
 # stored in /etc/modules.conf.
-#IPTABLES_MODULES=""
+IPTABLES_MODULES="ip_conntrack"
 
 # Unload modules on restart and stop
 #   Value: yes|no,  default: yes

diff --git a/iptables.init b/iptables.init
index 3b38aa8..5c99246 100755 (executable)
--- a/iptables.init
+++ b/iptables.init
@@ -34,7 +34,7 @@ fi
     || NEW_MODUTILS=0
 
 # Default firewall configuration:
-IPTABLES_MODULES="ip_conntrack"
+IPTABLES_MODULES=""
 IPTABLES_MODULES_UNLOAD="yes"
 IPTABLES_SAVE_ON_STOP="no"
 IPTABLES_SAVE_ON_RESTART="no"