mirror of
https://github.com/iiab/iiab.git
synced 2025-02-13 11:42:08 +00:00
52 lines
1.9 KiB
Text
52 lines
1.9 KiB
Text
|
## XS Config override
|
||
|
|
##
|
||
|
|
|
||
|
|
# Load additional iptables modules (nat helpers)
|
||
|
|
# Default: -none-
|
||
|
|
# Space separated list of nat helpers (e.g. 'nf_nat_ftp nf_nat_irc'), which
|
||
|
|
# are loaded after the firewall rules are applied. Options for the helpers are
|
||
|
|
# stored in /etc/modprobe.conf.
|
||
|
|
IPTABLES_MODULES="nf_conntrack nf_conntrack_ipv4 nf_nat_ftp nf_conntrack_ftp nf_nat_irc nf_conntrack_irc nf_nat_sip nf_conntrack_sip nf_nat_h323 nf_conntrack_h323 nf_nat_pptp nf_conntrack_pptp"
|
||
|
|
|
||
|
|
# Unload modules on restart and stop
|
||
|
|
# Value: yes|no, default: yes
|
||
|
|
# This option has to be 'yes' to get to a sane state for a firewall
|
||
|
|
# restart or stop. Only set to 'no' if there are problems unloading netfilter
|
||
|
|
# modules.
|
||
|
|
IPTABLES_MODULES_UNLOAD="yes"
|
||
|
|
|
||
|
|
# Save current firewall rules on stop.
|
||
|
|
# Value: yes|no, default: no
|
||
|
|
# Saves all firewall rules to /etc/sysconfig/iptables if firewall gets stopped
|
||
|
|
# (e.g. on system shutdown).
|
||
|
|
IPTABLES_SAVE_ON_STOP="no"
|
||
|
|
|
||
|
|
# Save current firewall rules on restart.
|
||
|
|
# Value: yes|no, default: no
|
||
|
|
# Saves all firewall rules to /etc/sysconfig/iptables if firewall gets
|
||
|
|
# restarted.
|
||
|
|
IPTABLES_SAVE_ON_RESTART="no"
|
||
|
|
|
||
|
|
# Save (and restore) rule and chain counter.
|
||
|
|
# Value: yes|no, default: no
|
||
|
|
# Save counters for rules and chains to /etc/sysconfig/iptables if
|
||
|
|
# 'service iptables save' is called or on stop or restart if SAVE_ON_STOP or
|
||
|
|
# SAVE_ON_RESTART is enabled.
|
||
|
|
IPTABLES_SAVE_COUNTER="no"
|
||
|
|
|
||
|
|
# Numeric status output
|
||
|
|
# Value: yes|no, default: yes
|
||
|
|
# Print IP addresses and port numbers in numeric format in the status output.
|
||
|
|
IPTABLES_STATUS_NUMERIC="yes"
|
||
|
|
|
||
|
|
# Verbose status output
|
||
|
|
# Value: yes|no, default: yes
|
||
|
|
# Print info about the number of packets and bytes plus the "input-" and
|
||
|
|
# "outputdevice" in the status output.
|
||
|
|
IPTABLES_STATUS_VERBOSE="no"
|
||
|
|
|
||
|
|
# Status output with numbered lines
|
||
|
|
# Value: yes|no, default: yes
|
||
|
|
# Print a counter/number for every rule in the status output.
|
||
|
|
IPTABLES_STATUS_LINENUMBERS="yes"
|