aboutsummaryrefslogtreecommitdiffstats
path: root/package/base-files
diff options
context:
space:
mode:
authorFelix Fietkau <nbd@openwrt.org>2014-08-07 19:30:36 +0000
committerFelix Fietkau <nbd@openwrt.org>2014-08-07 19:30:36 +0000
commitbc60d604b8985ca623795f2f1ea25d24e3e68de2 (patch)
tree77eb223e1aebeecca0e0ca59e5ce300af0fe411c /package/base-files
parent54e8abbb4c1fefbecba4f4c4fdd710f196ddca1b (diff)
downloadupstream-bc60d604b8985ca623795f2f1ea25d24e3e68de2.tar.gz
upstream-bc60d604b8985ca623795f2f1ea25d24e3e68de2.tar.bz2
upstream-bc60d604b8985ca623795f2f1ea25d24e3e68de2.zip
base-files: enable option to skip the netfilter "filter" table for established connection packets by default
Signed-off-by: Felix Fietkau <nbd@openwrt.org> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@42048 3c298f89-4303-0410-b956-a3cf2f4a3e73
Diffstat (limited to 'package/base-files')
-rw-r--r--package/base-files/files/etc/sysctl.conf1
1 files changed, 1 insertions, 0 deletions
diff --git a/package/base-files/files/etc/sysctl.conf b/package/base-files/files/etc/sysctl.conf
index 9e5714ef3e..eb7fe82111 100644
--- a/package/base-files/files/etc/sysctl.conf
+++ b/package/base-files/files/etc/sysctl.conf
@@ -21,6 +21,7 @@ net.netfilter.nf_conntrack_max=16384
net.netfilter.nf_conntrack_tcp_timeout_established=7440
net.netfilter.nf_conntrack_udp_timeout=60
net.netfilter.nf_conntrack_udp_timeout_stream=180
+net.netfilter.nf_conntrack_skip_filter=1
# disable bridge firewalling by default
net.bridge.bridge-nf-call-arptables=0