diff options
| -rw-r--r-- | debian/conntrackd.conf | 69 | ||||
| -rw-r--r-- | debian/conntrackd.install | 1 |
2 files changed, 70 insertions, 0 deletions
diff --git a/debian/conntrackd.conf b/debian/conntrackd.conf new file mode 100644 index 0000000..e514ac0 --- /dev/null +++ b/debian/conntrackd.conf @@ -0,0 +1,69 @@ +# +# General settings +# +General { + # + # Number of buckets in the caches: hash table + # + HashSize 8192 + + # + # Maximum number of conntracks: + # it must be >= $ cat /proc/sys/net/ipv4/netfilter/ip_conntrack_max + # + HashLimit 65535 + + # + # Logfile + # + LogFile /var/log/conntrackd.log + + # + # Lockfile + # + LockFile /var/lock/conntrack.lock + + # + # Unix socket configuration + # + UNIX { + Path /tmp/sync.sock + Backlog 20 + } + + # + # Netlink socket buffer size + # + SocketBufferSize 262142 + + # + # Increase the socket buffer up to maximun if required + # + SocketBufferSizeMaxGrown 655355 +} + +# +# Ignore traffic for a certain set of IP's: Usually +# all the IP assigned to the firewall since local +# traffic must be ignored, just forwarded connections +# are worth to replicate +# +IgnoreTrafficFor { + IPv4_address 127.0.0.1 # loopback +} + +# +# Do not replicate certain protocol traffic +# +IgnoreProtocol { + UDP +# ICMP +# IGMP +# VRRP + # numeric numbers also valid +} + +# +# Strip NAT traffic +# +StripNAT diff --git a/debian/conntrackd.install b/debian/conntrackd.install index 91a85fb..06d1b22 100644 --- a/debian/conntrackd.install +++ b/debian/conntrackd.install @@ -1,2 +1,3 @@ debian/tmp/usr/sbin/conntrackd +debian/conntrackd.conf etc examples/stats examples/sync usr/share/doc/conntrackd/examples |