aboutsummaryrefslogtreecommitdiffstats
path: root/main/unbound/update-unbound-root-hints
diff options
context:
space:
mode:
Diffstat (limited to 'main/unbound/update-unbound-root-hints')
-rw-r--r--main/unbound/update-unbound-root-hints4
1 files changed, 4 insertions, 0 deletions
diff --git a/main/unbound/update-unbound-root-hints b/main/unbound/update-unbound-root-hints
index 69c5e537da..ec7bb86079 100644
--- a/main/unbound/update-unbound-root-hints
+++ b/main/unbound/update-unbound-root-hints
@@ -3,6 +3,10 @@
# to allow passive ftp through a default deny iptables firewall:
# modprobe nf_conntrack_ftp
# echo nf_conntrack_ftp >> /etc/modules
+# enable helpers automatically via sysctl:
+# net.netfilter.nf_conntrack_helper = 1
+# OR enable manually for ftp only:
+# iptables -t raw -A PREROUTING -p tcp --dport 21 -j CT --helper ftp
check_format() {
# check that we have some ipv4 addresses and some '.' hints