liminix

commit 8362f19d485bbce8c038825ee9525c3822f2300b
parent dc391172f27b79c953a365014922a52363a8be31
Author: Daniel Barlow <dan@telent.net>
Date:   Tue, 29 Sep 2026 22:21:21 +0100

remove firewall DCCP support

Diffstat:
M
NEWS
 | 
5
+++++
M
modules/firewall/default.nix
 | 
1
-

2 files changed, 5 insertions(+), 1 deletion(-)
diff --git a/NEWS b/NEWS
@@ -179,3 +179,8 @@ The new module should be _mostly_ backward compatible, but it
 doesn't hold the sr-rc database lock while waiting to get a lease,
 which was a source of boot-time deadlocks
 
+2026-09-28
+
+* DCCP support has been removed from the firewall module, but it's
+  unlikely anyone will notice
+  (https://www.phoronix.com/news/Linux-6.16-Net-Next-Drops-DCCP)
diff --git a/modules/firewall/default.nix b/modules/firewall/default.nix
@@ -113,7 +113,6 @@ in
       NFT_REJECT = "m";
       NFT_REJECT_INET = "m";
 
-      NF_CT_PROTO_DCCP = "y";
       NF_CT_PROTO_SCTP = "y";
       NF_CT_PROTO_UDPLITE = "y";
       NF_LOG_SYSLOG = "m";