| 1 | |
| 2 |
|
| 3 | =========================
|
| 4 | Netfilter Sysfs variables
|
| 5 | =========================
|
| 6 |
|
| 7 | /proc/sys/net/netfilter/* Variables:
|
| 8 | ====================================
|
| 9 |
|
| 10 | nf_log_all_netns - BOOLEAN
|
| 11 | - 0 - disabled (default)
|
| 12 | - not 0 - enabled
|
| 13 |
|
| 14 | By default, only init_net namespace can log packets into kernel log
|
| 15 | with LOG target; this aims to prevent containers from flooding host
|
| 16 | kernel log. If enabled, this target also works in other network
|
| 17 | namespaces. This variable is only accessible from init_net.
|