[pve-devel] [PATCH pve-firewall 0/3] improve conntrack INVALID handling

[Alexandre Derumier]

This fix connection breaking/hanging

Alexandre Derumier (3):
  global -m conntrack --ctstate INVALID : PVEFW-reject instead DROP
  PVEFW-reject ipv4 : remove icmp drop rule
  remove -m conntrack --ctstate INVALID from PVEFW-Drop/PVEFW-Reject
    chains

 src/PVE/Firewall.pm | 11 +----------
 1 file changed, 1 insertion(+), 10 deletions(-)

-- 
2.11.0