summaryrefslogtreecommitdiff
blob: 465537406059ed5063ef098d4e04010f3f3e3b17 (plain) (blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
# Don't load iptables on startup (or ever)!

# These look weird, but the 'blacklist' command still allows
# module insertion.
#
# This method defines a load-time alias so when you load the module,
# it runs a delegated command to load the module instead, but in
# the case of denying modules completely, just run nothing.
install ip6table_filter /bin/true
install iptable_filter /bin/true
install ip6_tables /bin/true
install ip_tables /bin/true
install x_tables /bin/true
Powered by cgit v1.2.3 (git 2.41.0)