diff options
| author | Daniil Baturin <daniil.baturin@vyatta.com> | 2011-11-04 05:55:45 +0700 |
|---|---|---|
| committer | Daniil Baturin <daniil.baturin@vyatta.com> | 2011-11-04 05:55:45 +0700 |
| commit | e59537545e40756a893134c25eff533ccce3adb8 (patch) | |
| tree | 85110d89d4ea23c2650b0d0f42b3cbd32a150dd9 /templates-cfg/system/conntrack/tcp/loose | |
| parent | 174565005c06c4b7cc6f64b977f63f87b9bd75df (diff) | |
| download | vyatta-conntrack-e59537545e40756a893134c25eff533ccce3adb8.tar.gz vyatta-conntrack-e59537545e40756a893134c25eff533ccce3adb8.zip | |
Move templates t templates-cfg to let op mode templates also exist.
Diffstat (limited to 'templates-cfg/system/conntrack/tcp/loose')
| -rw-r--r-- | templates-cfg/system/conntrack/tcp/loose/node.def | 50 |
1 files changed, 50 insertions, 0 deletions
diff --git a/templates-cfg/system/conntrack/tcp/loose/node.def b/templates-cfg/system/conntrack/tcp/loose/node.def new file mode 100644 index 0000000..06706a2 --- /dev/null +++ b/templates-cfg/system/conntrack/tcp/loose/node.def @@ -0,0 +1,50 @@ +# +# This parameter directs the netfilter TCP connection tracking modules +# (nf_conntrack, and others) to either allow or disallow the tracking +# of TCP connections which are "previously established". This +# includes all cases where the three-way connection opening handshake +# was not seen by this machine. That includes the case the connection +# was opened before this machine booted. It also includes cases where +# the packets comprising the three-way handshake were routed via some +# other router. +# +# If this parameter is set to "enable", tracking such connections is +# allowed. If disabled, such tracking is disabled. +# default value - 1 + +type: txt + +help: Policy to track previously established connections + +val_help: enable; Allow tracking of previously established connections +val_help: disable; Do not allow tracking of previously established connections + +default: "enable" + +syntax:expression: $VAR(@) in "enable", "disable"; "must be either enable or disable" + +update: + if [ ! -e /proc/sys/net/ipv4/netfilter/ip_conntrack_tcp_loose ]; then + sudo modprobe nf_conntrack_ipv4 + fi + if [ "$VAR(@)" = "enable" ]; then + sudo sysctl -q -w net/ipv4/netfilter/ip_conntrack_tcp_loose=1 + elif [ "$VAR(@)" = "disable" ]; then + sudo sysctl -q -w net/ipv4/netfilter/ip_conntrack_tcp_loose=0 + else + echo "Invalid parameter: $VAR(@)" + exit 1 + fi + +delete: + if [ ! -e /proc/sys/net/ipv4/netfilter/ip_conntrack_tcp_loose ]; then + sudo modprobe nf_conntrack_ipv4 + fi + sudo sysctl -q -w net/ipv4/netfilter/ip_conntrack_tcp_loose=1 + + + + + + + |