blob: 06706a24bb2c3757b9e07d5c0f4c9e5e44948f2c (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
|
#
# This parameter directs the netfilter TCP connection tracking modules
# (nf_conntrack, and others) to either allow or disallow the tracking
# of TCP connections which are "previously established". This
# includes all cases where the three-way connection opening handshake
# was not seen by this machine. That includes the case the connection
# was opened before this machine booted. It also includes cases where
# the packets comprising the three-way handshake were routed via some
# other router.
#
# If this parameter is set to "enable", tracking such connections is
# allowed. If disabled, such tracking is disabled.
# default value - 1
type: txt
help: Policy to track previously established connections
val_help: enable; Allow tracking of previously established connections
val_help: disable; Do not allow tracking of previously established connections
default: "enable"
syntax:expression: $VAR(@) in "enable", "disable"; "must be either enable or disable"
update:
if [ ! -e /proc/sys/net/ipv4/netfilter/ip_conntrack_tcp_loose ]; then
sudo modprobe nf_conntrack_ipv4
fi
if [ "$VAR(@)" = "enable" ]; then
sudo sysctl -q -w net/ipv4/netfilter/ip_conntrack_tcp_loose=1
elif [ "$VAR(@)" = "disable" ]; then
sudo sysctl -q -w net/ipv4/netfilter/ip_conntrack_tcp_loose=0
else
echo "Invalid parameter: $VAR(@)"
exit 1
fi
delete:
if [ ! -e /proc/sys/net/ipv4/netfilter/ip_conntrack_tcp_loose ]; then
sudo modprobe nf_conntrack_ipv4
fi
sudo sysctl -q -w net/ipv4/netfilter/ip_conntrack_tcp_loose=1
|
