From 9f9eba3716c354201659a7a454b8f8b02c921bd3 Mon Sep 17 00:00:00 2001 From: Kevin Fenzi Date: Mon, 25 May 2020 13:30:48 -0700 Subject: [PATCH] base / iptables: drop nat and raw chains from here, as f32 does not like them Signed-off-by: Kevin Fenzi --- roles/base/templates/iptables/iptables.releng | 9 --------- 1 file changed, 9 deletions(-) diff --git a/roles/base/templates/iptables/iptables.releng b/roles/base/templates/iptables/iptables.releng index 56528bd223..78a15b9c00 100644 --- a/roles/base/templates/iptables/iptables.releng +++ b/roles/base/templates/iptables/iptables.releng @@ -3,15 +3,6 @@ # NOTE: Chaging this template updates iptables on all releng hosts :) # Please check with sysadmin-main before pushing out an update here. # -*nat -:PREROUTING ACCEPT [] -:POSTROUTING ACCEPT [] -:OUTPUT ACCEPT [] -COMMIT -*raw -:PREROUTING ACCEPT [] -:OUTPUT ACCEPT [] -COMMIT *filter :INPUT DROP [] :FORWARD ACCEPT []