keep legacy iptables as default to stay compatible with previous beha…

…vior
zyclonite · Nov 5, 2023 · d18dfe3 · d18dfe3
1 parent ea04bd7
commit d18dfe3
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/Dockerfile.router b/Dockerfile.router
@@ -13,7 +13,7 @@ ENV LOG_PATH=/var/log/supervisor
 
 COPY scripts/entrypoint-router.sh /usr/sbin/
 
-RUN apk add --no-cache --purge --clean-protected iptables-legacy tzdata \
+RUN apk add --no-cache --purge --clean-protected iptables iptables-legacy tzdata \
   && rm -rf /var/cache/apk/*
 
 EXPOSE 9993/udp

diff --git a/scripts/entrypoint-router.sh b/scripts/entrypoint-router.sh
@@ -47,7 +47,7 @@ echo "$(date) - launching ZeroTier-One in routing mode"
 PHY_IFACES="${ZEROTIER_ONE_LOCAL_PHYS:-"eth0"}"
 
 # default to iptables (maintains backwards compatibility)
-IPTABLES_CMD=iptables
+IPTABLES_CMD=iptables-legacy
 # but support an override to use iptables-nft
 [ "${ZEROTIER_ONE_USE_IPTABLES_NFT}" = "true" ] && IPTABLES_CMD=iptables-nft