[LEDE-DEV] [PATCH] base-files: Remove deprecated bridge filtering settings
Koen Vandeputte
koen.vandeputte at ncentric.com
Tue Aug 23 03:36:57 PDT 2016
Since kernel 3.18, br_netfilter is not loaded by default on boot
As <3.18 kernels are not supported anymore in LEDE,
these settings are useless.
This also removes the following bootprint whining about it:
bridge: automatic filtering via arp/ip/ip6tables has been deprecated.
Update your scripts to load br_netfilter if you need this.
Signed-off-by: Koen Vandeputte <koen.vandeputte at ncentric.com>
diff --git a/package/base-files/files/etc/sysctl.conf
b/package/base-files/files/etc/sysctl.conf
index 91a3ac9..9ddfe0e 100644
--- a/package/base-files/files/etc/sysctl.conf
+++ b/package/base-files/files/etc/sysctl.conf
@@ -23,8 +23,3 @@ net.netfilter.nf_conntrack_max=16384
net.netfilter.nf_conntrack_tcp_timeout_established=7440
net.netfilter.nf_conntrack_udp_timeout=60
net.netfilter.nf_conntrack_udp_timeout_stream=180
-
-# disable bridge firewalling by default
-net.bridge.bridge-nf-call-arptables=0
-net.bridge.bridge-nf-call-ip6tables=0
-net.bridge.bridge-nf-call-iptables=0
More information about the Lede-dev
mailing list