Re: [Fwbuilder-discussion] iptables 1.4.16 state match deprecated for conntrack
Brought to you by:
mikehorn
From: <da...@se...> - 2013-03-07 18:54:39
|
For those interested, until you find an fwbuilder alternative, a kludgy but effective way to implement the workaround for the fwbuilder-generated scripts' deprecated "-m state --state" usage is to use the following (on linux, with pkg "ed" installed) as a custom installer command: printf '%s\n' 'g/-m state --state/s//-m conntrack --ctstate/g' w | ed -s /full/path/to/my_script_name.fw && /full/path/to/my_script_name.fw using this, installs and exec are both ok. |