From 1b09f176fcd7f19fed7253f028448d4bf940c36e Mon Sep 17 00:00:00 2001
From: Jamie Cameron <jcameron@webmin.com>
Date: Sat, 17 Apr 2021 11:59:51 -0700
Subject: [PATCH] Remove flag for unsupported conntrack mode
 https://sourceforge.net/p/webadmin/bugs/5478/

---
 firewall/save_rule.cgi | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/firewall/save_rule.cgi b/firewall/save_rule.cgi
index 70f0048ce..4a1aeff82 100755
--- a/firewall/save_rule.cgi
+++ b/firewall/save_rule.cgi
@@ -321,11 +321,13 @@ else {
 
 	# Save connection states and TOS
 	my $sd = &supports_conntrack() ? "ctstate" : "state";
+	my $nonsd = $sd eq "ctstate" ? "state" : "ctstate";
 	if (&parse_mode($sd, $rule, $sd)) {
 		@states = split(/\0/, $in{$sd});
 		@states || &error($text{'save_estates'});
 		$rule->{$sd}->[1] = join(",", @states);
 		push(@mods, $sd eq "state" ? "state" : "conntrack");
+		delete($rule->{$nonsd});
 		}
 	if (&parse_mode("tos", $rule, "tos")) {
 		$rule->{'tos'}->[1] = $in{'tos'};