Skip to content

Latest commit

 

History

History
40 lines (20 loc) · 908 Bytes

pve-firewall-host-opts.adoc

File metadata and controls

40 lines (20 loc) · 908 Bytes
enable: boolean

Enable host firewall rules.

log_level_in: (alert | crit | debug | emerg | err | info | nolog | notice | warning)

Log level for incoming traffic.

log_level_out: (alert | crit | debug | emerg | err | info | nolog | notice | warning)

Log level for outgoing traffic.

ndp: boolean

Enable NDP.

nf_conntrack_max: integer (32768 - N)

Maximum number of tracked connections.

nf_conntrack_tcp_timeout_established: integer (7875 - N)

Conntrack established timeout.

nosmurfs: boolean

Enable SMURFS filter.

smurf_log_level: (alert | crit | debug | emerg | err | info | nolog | notice | warning)

Log level for SMURFS filter.

tcp_flags_log_level: (alert | crit | debug | emerg | err | info | nolog | notice | warning)

Log level for illegal tcp flags filter.

tcpflags: boolean

Filter illegal combinations of TCP flags.