Commit graph

3 commits

Author SHA1 Message Date
Kevin Darbyshire-Bryant
d30e249d4c bcp38: iptables 1.6.1 compatibility (#4248)
-m state has been removed, now use -m conntrack --ctstate

Signed-off-by: Kevin Darbyshire-Bryant <kevin@darbyshire-bryant.me.uk>
2017-04-12 10:34:02 +02:00
Török Edwin
0b2b462ae0 BCP38: don't slow down established connections (#2838)
Enabling BCP38 causes an iptables rule to be inserted before this rule:
ACCEPT     all  --  anywhere             anywhere             ID:66773300 ctstate RELATED,ESTABLISHED

This makes all forwarded packets go through the BCP38 ipset match, which slows
down download speed from 440 Mbit/s to 340 Mbit/s.

Only apply BCP38 match rules if state is NEW.

Bump package version.

Signed-off-by: Török Edwin <edwin@skylable.com>
2016-06-12 15:09:05 +02:00
Toke Høiland-Jørgensen
0a38785592 Add BCP38 implementation package (from CeroWrt).
Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
2014-11-05 00:17:53 +01:00