On Tue, Feb 11, 2020 at 3:49 PM Matt Darfeuille <m...@shorewall.org> wrote: > > If the other modules are not loaded and 'AUTOHELPERS' is set to 'No', > are you sure that Shorewall is the culprit?
AUTOHELPERS is set to yes (default) for its convenience. Maybe I should specify a helper for each rule that needs it, and set AUTOHELPERS to no. Anyway, it seems I found a trick that works for me. Instead of blacklisting the modules in modprobe.d, I use the "install" command and pass it a program such as /bin/true. /etc/modprobe.d/blacklist.conf blacklist xt_iface install xt_geoip /bin/true blacklist xt_TARPIT Now, xt_geoip is never loaded (nor are the other ones). Vieri _______________________________________________ Shorewall-users mailing list Shorewall-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/shorewall-users