I have a simple policy like
{
“description”: “Base Policy”,
“variable”: {“ADDRS”: [ “192.168.1.0/24” ]},
“zone”: {“Z1”: { “iface”: “eth1”, “addr”: “$ADDRS” }},
“policy”: [
{ “in”: “_fw”, “action”: “accept” },
{ “in”: “Z1”, “out”: “_fw”, “action”: “accept” },
{ “action”: “drop”, “log”: false }
]
}

when i do awall activate, iptable warn me:
Warning: inet6 rules not tested
WARNING: The state match is obsolete. Use conntrack instead.
WARNING: The state match is obsolete. Use conntrack instead.
WARNING: The state match is obsolete. Use conntrack instead.
WARNING: The state match is obsolete. Use conntrack instead.
WARNING: The state match is obsolete. Use conntrack instead.
WARNING: The state match is obsolete. Use conntrack instead.

This happen only with Alpine 2.5.
Bye
Alessandro

(from redmine: issue id 1497, created on 2012-12-05, closed on 2013-02-08)

• Changesets:
  • Revision 0e83c2ead081c11b763dda91333916a00d49170e by Natanael Copa on 2012-12-28T15:05:18Z:

main/awall: fix warning about -m state

ref #1497

• Revision 78f82234bda9bfe7be6c088227517848e954f560 by Natanael Copa on 2012-12-28T15:06:11Z:

main/awall: fix warning about -m state

fixes #1497
(cherry picked from commit 0e83c2ead081c11b763dda91333916a00d49170e)

• Revision 9635c871 by Natanael Copa on 2013-01-01T08:35:51Z:

filter: fix warning about -m state in newer iptables

Fixes this warning when using recent iptables:
WARNING: The state match is obsolete. Use conntrack instead.

ref #1497