On Tue, Feb 11, 2020 at 3:49 PM Matt Darfeuille <m...@shorewall.org> wrote:
>
> If the other modules are not loaded and 'AUTOHELPERS' is set to 'No',
> are you sure that Shorewall is the culprit?

AUTOHELPERS is set to yes (default) for its convenience.
Maybe I should specify a helper for each rule that needs it, and set
AUTOHELPERS to no.

Anyway, it seems I found a trick that works for me. Instead of
blacklisting the modules in modprobe.d, I use the "install" command
and pass it a program such as /bin/true.

/etc/modprobe.d/blacklist.conf
blacklist xt_iface
install xt_geoip /bin/true
blacklist xt_TARPIT

Now, xt_geoip is never loaded (nor are the other ones).

Vieri


_______________________________________________
Shorewall-users mailing list
Shorewall-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to