vanja/gluetun
1
0
Fork 0
mirror of https://github.com/qdm12/gluetun.git synced 2026-05-08 21:10:11 +02:00
Code Issues Packages Projects Releases Wiki Activity

Require xt_CONNMARK and define its kernel config values

Browse Source
This commit is contained in:
Quentin McGaw
2026-02-28 15:13:23 +00:00
parent bfc8136bc9
commit 594b1db98b
3 changed files with 8 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
internal/firewall/iptables/iptables.go
+1 -1
View File
@@ -185,7 +185,7 @@ func (c *Config) AcceptOutputPublicOnlyNewTraffic(ctx context.Context) error {
}
kernelErr := checkKernelModulesAreOK(c.modules.nfConntrack,
c.modules.xtConntrack, c.modules.xtConnmark)
c.modules.xtConntrack, c.modules.xtConnmark, c.modules.xtCONNMARK)
err = c.runIptablesInstructionsNoSave(ctx, ipv4Instructions)
if err != nil {
internal/firewall/iptables/kernel.go
+2
View File
@@ -11,6 +11,7 @@ type kernelModules struct {
nfConntrack kernelModule
nfRejectIPv4 kernelModule
xtConnmark kernelModule
xtCONNMARK kernelModule
xtConntrack kernelModule
xtReject kernelModule
}
@@ -26,6 +27,7 @@ func newKernelModules() kernelModules {
"nf_conntrack_netlink": &m.nfConntrack,
"nf_reject_ipv4": &m.nfRejectIPv4,
"xt_connmark": &m.xtConnmark,
"xt_CONNMARK": &m.xtCONNMARK,
"xt_conntrack": &m.xtConntrack,
"xt_REJECT": &m.xtReject,
}
internal/mod/configgz_linux.go
+5 -2
View File
@@ -81,8 +81,11 @@ func moduleNameToKernelFeatureGroups(moduleName string) (featureGroups [][]strin
// Netfilter Matches
"xt_conntrack": {{"CONFIG_NETFILTER_XT_MATCH_CONNTRACK"}},
"xt_connmark": {
{"CONFIG_NETFILTER_XT_CONNMARK"},
{"CONFIG_NETFILTER_XT_MATCH_CONNMARK", "CONFIG_NETFILTER_XT_TARGET_CONNMARK"},
{"CONFIG_NETFILTER_XT_MATCH_CONNMARK"},
},
"xt_CONNMARK": {
{"CONFIG_NETFILTER_XT_MATCH_CONNMARK"},
{"CONFIG_NETFILTER_XT_TARGET_CONNMARK"}, // older kernels
},
"xt_mark": {
{"CONFIG_NETFILTER_XT_MARK"},