diff options
| author | Max Kellermann <max@duempel.org> | 2008-01-03 19:06:49 +0000 |
|---|---|---|
| committer | Max Kellermann <max@duempel.org> | 2008-01-03 19:06:49 +0000 |
| commit | 0f066287cb9fc815f9368354155d7ab1e8ad5cf7 (patch) | |
| tree | cc7394eda5f80b2c17457065c643929f7e456934 /debian | |
| parent | b81ff78fdbbe909c49cfeb04813aa08197b306d4 (diff) | |
| download | conntrack-tools-0f066287cb9fc815f9368354155d7ab1e8ad5cf7.tar.gz conntrack-tools-0f066287cb9fc815f9368354155d7ab1e8ad5cf7.zip | |
imported the sample stats conntrackd.conf
Diffstat (limited to 'debian')
| -rw-r--r-- | debian/conntrackd.conf | 69 | ||||
| -rw-r--r-- | debian/conntrackd.install | 1 |
2 files changed, 70 insertions, 0 deletions
diff --git a/debian/conntrackd.conf b/debian/conntrackd.conf new file mode 100644 index 0000000..e514ac0 --- /dev/null +++ b/debian/conntrackd.conf @@ -0,0 +1,69 @@ +# +# General settings +# +General { + # + # Number of buckets in the caches: hash table + # + HashSize 8192 + + # + # Maximum number of conntracks: + # it must be >= $ cat /proc/sys/net/ipv4/netfilter/ip_conntrack_max + # + HashLimit 65535 + + # + # Logfile + # + LogFile /var/log/conntrackd.log + + # + # Lockfile + # + LockFile /var/lock/conntrack.lock + + # + # Unix socket configuration + # + UNIX { + Path /tmp/sync.sock + Backlog 20 + } + + # + # Netlink socket buffer size + # + SocketBufferSize 262142 + + # + # Increase the socket buffer up to maximun if required + # + SocketBufferSizeMaxGrown 655355 +} + +# +# Ignore traffic for a certain set of IP's: Usually +# all the IP assigned to the firewall since local +# traffic must be ignored, just forwarded connections +# are worth to replicate +# +IgnoreTrafficFor { + IPv4_address 127.0.0.1 # loopback +} + +# +# Do not replicate certain protocol traffic +# +IgnoreProtocol { + UDP +# ICMP +# IGMP +# VRRP + # numeric numbers also valid +} + +# +# Strip NAT traffic +# +StripNAT diff --git a/debian/conntrackd.install b/debian/conntrackd.install index 91a85fb..06d1b22 100644 --- a/debian/conntrackd.install +++ b/debian/conntrackd.install @@ -1,2 +1,3 @@ debian/tmp/usr/sbin/conntrackd +debian/conntrackd.conf etc examples/stats examples/sync usr/share/doc/conntrackd/examples |