From 08ad4e9bc6bfd1b88ac31a2ee8e56f60abeadc7b Mon Sep 17 00:00:00 2001 From: Joachim Wiberg Date: Mon, 22 May 2023 08:36:30 +0200 Subject: [PATCH] Fix #24: disable bridge firewalling by default in Infix Signed-off-by: Joachim Wiberg --- board/common/rootfs/etc/sysctl.d/bridge-no-filter.conf | 4 ++++ 1 file changed, 4 insertions(+) create mode 100644 board/common/rootfs/etc/sysctl.d/bridge-no-filter.conf diff --git a/board/common/rootfs/etc/sysctl.d/bridge-no-filter.conf b/board/common/rootfs/etc/sysctl.d/bridge-no-filter.conf new file mode 100644 index 00000000..b52ae7e7 --- /dev/null +++ b/board/common/rootfs/etc/sysctl.d/bridge-no-filter.conf @@ -0,0 +1,4 @@ +# https://addiva-elektronik.github.io/2023/03/29/bridge-firewalling/ +net.bridge.bridge-nf-call-ip6tables = 0 +net.bridge.bridge-nf-call-iptables = 0 +net.bridge.bridge-nf-call-arptables = 0