[Ferm] Issues with NOTRACK

Adam McKenna adam at flounder.net
Mon Dec 16 20:02:46 CET 2013


Hi, I'm currently trying to avoid connection tracking on some high traffic
open ports on my server.

I've added the following to ferm.conf:

table nat {
    chain PREROUTING {
        proto tcp dport 3330:3360 NOTRACK;
    }
}

When I issue a ferm restart, I get the following output:

 * Reloading Firewall configuration...
Notice: The NOTRACK target is converted into CT target in rule listing and
saving.
iptables-restore: line 5 failed
Failed to run /sbin/iptables-restore

Firewall rules rolled back.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://foo-projects.org/pipermail/ferm/attachments/20131216/0598e635/attachment.html>


More information about the Ferm mailing list