summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorNatanael Copa <ncopa@alpinelinux.org>2012-12-28 14:22:56 +0100
committerKaarle Ritvanen <kaarle.ritvanen@datakunkku.fi>2013-01-01 07:35:51 +0000
commit9635c871e0f8e20d5f93f19ace2c863d983fe20f (patch)
tree0e0d046f3b875d082d80ad3d5b761dda69c0eae0
parentf03aa51cf9ee49fa09996739e255c0a2f4cd36d0 (diff)
downloadawall-9635c871e0f8e20d5f93f19ace2c863d983fe20f.tar.bz2
awall-9635c871e0f8e20d5f93f19ace2c863d983fe20f.tar.xz
filter: fix warning about -m state in newer iptables
Fixes this warning when using recent iptables: WARNING: The state match is obsolete. Use conntrack instead. ref #1497
-rw-r--r--awall/modules/filter.lua2
1 files changed, 1 insertions, 1 deletions
diff --git a/awall/modules/filter.lua b/awall/modules/filter.lua
index a635939..b697ae5 100644
--- a/awall/modules/filter.lua
+++ b/awall/modules/filter.lua
@@ -202,7 +202,7 @@ defrules = {}
local fchains = {{chain='FORWARD'}, {chain='INPUT'}, {chain='OUTPUT'}}
local dar = combinations(fchains,
- {{opts='-m state --state RELATED,ESTABLISHED'}})
+ {{opts='-m conntrack --ctstate RELATED,ESTABLISHED'}})
for i, chain in ipairs({'INPUT', 'OUTPUT'}) do
table.insert(dar,
{chain=chain,