diff options
| author | Daniil Baturin <daniil.baturin@vyatta.com> | 2011-11-08 04:14:23 +0700 |
|---|---|---|
| committer | Daniil Baturin <daniil.baturin@vyatta.com> | 2011-11-08 04:14:23 +0700 |
| commit | f83f2f4b2d485fc59c6d8d1e217f8e926c065ff6 (patch) | |
| tree | 411b0cfcc44b71ad271b7931c8a26ac09e414856 /templates/firewall | |
| parent | f3d5296c2287fdffa3c39c8b99d786685f7dffd2 (diff) | |
| download | vyatta-cfg-firewall-f83f2f4b2d485fc59c6d8d1e217f8e926c065ff6.tar.gz vyatta-cfg-firewall-f83f2f4b2d485fc59c6d8d1e217f8e926c065ff6.zip | |
Remove conntrack-related code from firewall top level template
(it was moved to vyatta-conntrack).
Diffstat (limited to 'templates/firewall')
| -rw-r--r-- | templates/firewall/node.def | 21 |
1 files changed, 0 insertions, 21 deletions
diff --git a/templates/firewall/node.def b/templates/firewall/node.def index 6ee0386..c71966b 100644 --- a/templates/firewall/node.def +++ b/templates/firewall/node.def @@ -1,23 +1,2 @@ priority: 199 help: Firewall - -delete: # set conntrack table size to standard 16384 entries if fw disabled - sudo sh -c "echo 16384 > /proc/sys/net/nf_conntrack_max" - - # set conntrack expect table size to standard 2048 entries if fw disabled - sudo sh -c "echo 2048 > /proc/sys/net/netfilter/nf_conntrack_expect_max" - - # set conntrack hash size to standard 4096 - if ! grep -q "nf_conntrack hashsize=4096$" /etc/modprobe.d/vyatta_nf_conntrack.conf - then - sudo sh -c "sed -i -e '/options nf_conntrack hashsize/d' \ - /etc/modprobe.d/vyatta_nf_conntrack.conf" - sudo sh -c "echo options nf_conntrack hashsize=4096 >> \ - /etc/modprobe.d/vyatta_nf_conntrack.conf" - echo "Conntrack hash size set to default 4096. This change will take affect when the system is rebooted." - fi - - # need to restart conntrackd with updated conntrack table size - if cli-shell-api existsActive service conntrack-sync; then - sudo /opt/vyatta/sbin/vyatta-conntrack-sync.pl --action=enable - fi |