How to stop firewalld / nftables tracking DNS queries in RHEL 8

Posted on

Hi all,

In RHEL 7 and earlier we could stop iptables from filling its ip_conntrack table up by using the NOTRACK option.

In RHEL 8 iptables is deprecated, so I need to find an alternative way of doing this.

Ideally I want to be able to use firewalld to do this, but I can live with using the --direct option of firewalld if required.

All suggestions would be appreciated.

BR

Responses