2016-11-05 16:49:43 +01:00
`enable`: `<boolean>` ::
2016-04-01 12:45:24 +02:00
Enable host firewall rules.
2016-11-05 16:49:43 +01:00
`log_level_in`: `<alert | crit | debug | emerg | err | info | nolog | notice | warning>` ::
2016-04-01 12:45:24 +02:00
Log level for incoming traffic.
2016-11-05 16:49:43 +01:00
`log_level_out`: `<alert | crit | debug | emerg | err | info | nolog | notice | warning>` ::
2016-04-01 12:45:24 +02:00
Log level for outgoing traffic.
2019-04-04 17:17:19 +02:00
`log_nf_conntrack`: `<boolean>` ('default =' `0`)::
Enable logging of conntrack information.
2016-11-05 16:49:43 +01:00
`ndp`: `<boolean>` ::
2016-04-01 12:45:24 +02:00
Enable NDP.
2019-02-01 13:49:11 +01:00
`nf_conntrack_allow_invalid`: `<boolean>` ('default =' `0`)::
Allow invalid packets on connection tracking.
2016-11-05 16:49:43 +01:00
`nf_conntrack_max`: `<integer> (32768 - N)` ::
2016-04-01 12:45:24 +02:00
Maximum number of tracked connections.
2016-11-05 16:49:43 +01:00
`nf_conntrack_tcp_timeout_established`: `<integer> (7875 - N)` ::
2016-04-01 12:45:24 +02:00
Conntrack established timeout.
2016-11-05 16:49:43 +01:00
`nosmurfs`: `<boolean>` ::
2016-04-01 12:45:24 +02:00
Enable SMURFS filter.
2016-11-05 16:49:43 +01:00
`smurf_log_level`: `<alert | crit | debug | emerg | err | info | nolog | notice | warning>` ::
2016-04-01 12:45:24 +02:00
Log level for SMURFS filter.
2016-11-05 16:49:43 +01:00
`tcp_flags_log_level`: `<alert | crit | debug | emerg | err | info | nolog | notice | warning>` ::
2016-04-01 12:45:24 +02:00
Log level for illegal tcp flags filter.
2016-11-05 16:49:43 +01:00
`tcpflags`: `<boolean>` ::
2016-04-01 12:45:24 +02:00
Filter illegal combinations of TCP flags.
