diff options
| author | Daniil Baturin <daniil.baturin@vyatta.com> | 2011-08-16 17:24:03 +0700 |
|---|---|---|
| committer | John Southworth <john.southworth@vyatta.com> | 2011-11-04 10:04:00 -0700 |
| commit | ac4a1845a4cb9f6bb981fd83e18ea8b04809843e (patch) | |
| tree | 1018e7145e8af020eb2f0a26b54523275ddd7f00 /templates/firewall/conntrack-tcp-loose | |
| parent | 737786e6b09e0d90a29791f8f4dcd6fdf13718a7 (diff) | |
| download | vyatta-cfg-firewall-ac4a1845a4cb9f6bb981fd83e18ea8b04809843e.tar.gz vyatta-cfg-firewall-ac4a1845a4cb9f6bb981fd83e18ea8b04809843e.zip | |
Remove conntrack-related templates from firewall
Diffstat (limited to 'templates/firewall/conntrack-tcp-loose')
| -rw-r--r-- | templates/firewall/conntrack-tcp-loose/node.def | 53 |
1 files changed, 0 insertions, 53 deletions
diff --git a/templates/firewall/conntrack-tcp-loose/node.def b/templates/firewall/conntrack-tcp-loose/node.def deleted file mode 100644 index 86489b7..0000000 --- a/templates/firewall/conntrack-tcp-loose/node.def +++ /dev/null @@ -1,53 +0,0 @@ -# -# This parameter directs the netfilter TCP connection tracking modules -# (nf_conntrack, and others) to either allow or disallow the tracking -# of TCP connections which are "previously established". This -# includes all cases where the three-way connection opening handshake -# was not seen by this machine. That includes the case the connection -# was opened before this machine booted. It also includes cases where -# the packets comprising the three-way handshake were routed via some -# other router. -# -# If this parameter is set to "enable", tracking such connections is -# allowed. If disabled, such tracking is disabled. -# default value - 1 - -type: txt - -help: Policy to track previously established connections - -val_help: enable; Allow tracking of previously established connections -val_help: disable; Do not allow tracking of previously established connections - -default: "enable" - -syntax:expression: $VAR(@) in "enable", "disable"; "must be either enable or disable" - -update: - if [ ! -e /proc/sys/net/ipv4/netfilter/ip_conntrack_tcp_loose ]; then - sudo modprobe nf_conntrack_ipv4 - fi - if [ "$VAR(@)" = "enable" ]; then - sudo sh -c "echo 1 > \ - /proc/sys/net/ipv4/netfilter/ip_conntrack_tcp_loose" - elif [ "$VAR(@)" = "disable" ]; then - sudo sh -c "echo 0 > \ - /proc/sys/net/ipv4/netfilter/ip_conntrack_tcp_loose" - else - echo "Invalid parameter: $VAR(@)" - exit 1 - fi - -delete: - if [ ! -e /proc/sys/net/ipv4/netfilter/ip_conntrack_tcp_loose ]; then - sudo modprobe nf_conntrack_ipv4 - fi - sudo sh -c "echo 1 > \ - /proc/sys/net/ipv4/netfilter/ip_conntrack_tcp_loose" - - - - - - - |