From patchwork Tue Aug 23 10:36:57 2016 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Koen Vandeputte X-Patchwork-Id: 661818 Return-Path: X-Original-To: incoming@patchwork.ozlabs.org Delivered-To: patchwork-incoming@bilbo.ozlabs.org Received: from bombadil.infradead.org (bombadil.infradead.org [IPv6:2001:1868:205::9]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ozlabs.org (Postfix) with ESMTPS id 3sJRl713TGz9t15 for ; Tue, 23 Aug 2016 20:39:31 +1000 (AEST) Authentication-Results: ozlabs.org; dkim=fail reason="signature verification failed" (1024-bit key; unprotected) header.d=ncentric.com header.i=@ncentric.com header.b=fmSFAU6I; dkim-atps=neutral Received: from localhost ([127.0.0.1] helo=bombadil.infradead.org) by bombadil.infradead.org with esmtp (Exim 4.85_2 #1 (Red Hat Linux)) id 1bc95D-0007Xg-Ld; Tue, 23 Aug 2016 10:37:27 +0000 Received: from mail-wm0-x22c.google.com ([2a00:1450:400c:c09::22c]) by bombadil.infradead.org with esmtps (Exim 4.85_2 #1 (Red Hat Linux)) id 1bc958-0007JS-Br for lede-dev@lists.infradead.org; Tue, 23 Aug 2016 10:37:23 +0000 Received: by mail-wm0-x22c.google.com with SMTP id q128so26696147wma.1 for ; Tue, 23 Aug 2016 03:36:59 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ncentric.com; s=google; h=to:from:subject:message-id:date:user-agent:mime-version :content-transfer-encoding; bh=13ilXRc2Q1SNWPG4Kapg9S7G96n/oRqDBtnu0uFDwDY=; b=fmSFAU6IQfgyX4Ji04qqEnSA+lDRaA2XkpAJwS5RSh+b/XJyXzMw3nPd5stdKJqQ3E X6UGp8p+0h4SxKargfNivCL678d2CykPeq0HUQNmt2ZX1jy+Qp16qLo9eYDVt9x4NCB1 VXlX9Lk5fzfovWpQQvTEji2m3Ub9hUfQzhlwM= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:to:from:subject:message-id:date:user-agent :mime-version:content-transfer-encoding; bh=13ilXRc2Q1SNWPG4Kapg9S7G96n/oRqDBtnu0uFDwDY=; b=INyhWSNNz13F3vYOAGcSGUvqRt+ZFBWzFgHVEO4gFVctz5Enpv3z9AuENYAFtgngpm 8vb2vnH5lLEbSAsIGuMSspqYwa+jdMQZRVngkAdE0o61q1iOE8m5e/yISYMnONpv55yp KXvPk6Fr4Lh5xvNZFU359/LqGYMH/FMYMtggenSPFKPbOUahaVIreg6wdJXbpi5tC/vh wZvquK/eSuGwuOc5fWvP6JXj5GUv6AcyZ8GtavuFy/bI4mb8hmry1joodnT/0M/MBtdW V2ru28LjZWWZ7IeshUwhcCxkmKG5G2OjsXI6xUKBE7raoziqqyclPT8bBNKdBguXfnbT neSA== X-Gm-Message-State: AEkoousBQ46RuRSG4vaaw6O50UikeVFsM04dKpyV6mNrYfHzifiIkO8/H4G6NPurHvHTNg== X-Received: by 10.28.109.214 with SMTP id b83mr18442540wmi.19.1471948618249; Tue, 23 Aug 2016 03:36:58 -0700 (PDT) Received: from [192.168.3.149] (d515300d8.static.telenet.be. [81.83.0.216]) by smtp.gmail.com with ESMTPSA id yz6sm3010793wjb.35.2016.08.23.03.36.57 for (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Tue, 23 Aug 2016 03:36:57 -0700 (PDT) To: lede-dev@lists.infradead.org From: Koen Vandeputte Message-ID: Date: Tue, 23 Aug 2016 12:36:57 +0200 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Thunderbird/45.2.0 MIME-Version: 1.0 X-CRM114-Version: 20100106-BlameMichelson ( TRE 0.8.0 (BSD) ) MR-646709E3 X-CRM114-CacheID: sfid-20160823_033722_825602_739409F7 X-CRM114-Status: UNSURE ( 8.03 ) X-CRM114-Notice: Please train this message. X-Spam-Score: -2.7 (--) X-Spam-Report: SpamAssassin version 3.4.0 on bombadil.infradead.org summary: Content analysis details: (-2.7 points) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [2a00:1450:400c:c09:0:0:0:22c listed in] [list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record -1.9 BAYES_00 BODY: Bayes spam probability is 0 to 1% [score: 0.0000] -0.1 DKIM_VALID Message has at least one valid DKIM or DK signature -0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's domain 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid Subject: [LEDE-DEV] [PATCH] base-files: Remove deprecated bridge filtering settings X-BeenThere: lede-dev@lists.infradead.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: "Lede-dev" Errors-To: lede-dev-bounces+incoming=patchwork.ozlabs.org@lists.infradead.org Since kernel 3.18, br_netfilter is not loaded by default on boot As <3.18 kernels are not supported anymore in LEDE, these settings are useless. This also removes the following bootprint whining about it: bridge: automatic filtering via arp/ip/ip6tables has been deprecated. Update your scripts to load br_netfilter if you need this. Signed-off-by: Koen Vandeputte diff --git a/package/base-files/files/etc/sysctl.conf b/package/base-files/files/etc/sysctl.conf index 91a3ac9..9ddfe0e 100644 --- a/package/base-files/files/etc/sysctl.conf +++ b/package/base-files/files/etc/sysctl.conf @@ -23,8 +23,3 @@ net.netfilter.nf_conntrack_max=16384 net.netfilter.nf_conntrack_tcp_timeout_established=7440 net.netfilter.nf_conntrack_udp_timeout=60 net.netfilter.nf_conntrack_udp_timeout_stream=180 - -# disable bridge firewalling by default -net.bridge.bridge-nf-call-arptables=0 -net.bridge.bridge-nf-call-ip6tables=0 -net.bridge.bridge-nf-call-iptables=0