vanja/gluetun
1
0
Fork 0
mirror of https://github.com/qdm12/gluetun.git synced 2026-05-09 20:29:23 +02:00
Code Issues Packages Projects Releases Wiki Activity

Require xt_CONNMARK and define its kernel config values

Browse Source
This commit is contained in:
Quentin McGaw
2026-02-28 15:13:23 +00:00
parent bfc8136bc9
commit 594b1db98b
3 changed files with 8 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
internal/firewall/iptables/iptables.go
+1 -1
View File
@@ -185,7 +185,7 @@ func (c *Config) AcceptOutputPublicOnlyNewTraffic(ctx context.Context) error {
} }
kernelErr := checkKernelModulesAreOK(c.modules.nfConntrack, kernelErr := checkKernelModulesAreOK(c.modules.nfConntrack,
c.modules.xtConntrack, c.modules.xtConnmark) c.modules.xtConntrack, c.modules.xtConnmark, c.modules.xtCONNMARK)
err = c.runIptablesInstructionsNoSave(ctx, ipv4Instructions) err = c.runIptablesInstructionsNoSave(ctx, ipv4Instructions)
if err != nil { if err != nil {
internal/firewall/iptables/kernel.go
+2
View File
@@ -11,6 +11,7 @@ type kernelModules struct {
nfConntrack kernelModule nfConntrack kernelModule
nfRejectIPv4 kernelModule nfRejectIPv4 kernelModule
xtConnmark kernelModule xtConnmark kernelModule
xtCONNMARK kernelModule
xtConntrack kernelModule xtConntrack kernelModule
xtReject kernelModule xtReject kernelModule
} }
@@ -26,6 +27,7 @@ func newKernelModules() kernelModules {
"nf_conntrack_netlink": &m.nfConntrack, "nf_conntrack_netlink": &m.nfConntrack,
"nf_reject_ipv4": &m.nfRejectIPv4, "nf_reject_ipv4": &m.nfRejectIPv4,
"xt_connmark": &m.xtConnmark, "xt_connmark": &m.xtConnmark,
"xt_CONNMARK": &m.xtCONNMARK,
"xt_conntrack": &m.xtConntrack, "xt_conntrack": &m.xtConntrack,
"xt_REJECT": &m.xtReject, "xt_REJECT": &m.xtReject,
} }
internal/mod/configgz_linux.go
+5 -2
View File
@@ -81,8 +81,11 @@ func moduleNameToKernelFeatureGroups(moduleName string) (featureGroups [][]strin
// Netfilter Matches // Netfilter Matches
"xt_conntrack": {{"CONFIG_NETFILTER_XT_MATCH_CONNTRACK"}}, "xt_conntrack": {{"CONFIG_NETFILTER_XT_MATCH_CONNTRACK"}},
"xt_connmark": { "xt_connmark": {
{"CONFIG_NETFILTER_XT_CONNMARK"}, {"CONFIG_NETFILTER_XT_MATCH_CONNMARK"},
{"CONFIG_NETFILTER_XT_MATCH_CONNMARK", "CONFIG_NETFILTER_XT_TARGET_CONNMARK"}, },
"xt_CONNMARK": {
{"CONFIG_NETFILTER_XT_MATCH_CONNMARK"},
{"CONFIG_NETFILTER_XT_TARGET_CONNMARK"}, // older kernels
}, },
"xt_mark": { "xt_mark": {
{"CONFIG_NETFILTER_XT_MARK"}, {"CONFIG_NETFILTER_XT_MARK"},