projects / pve-firewall.git / blame
| Commit | Line | Data |
|---|---|---|
| 2d404ffc DM |
1 | # /etc/pve/local/host.fw |
| 2 | ||
| 3 | [OPTIONS] | |
| 4 | ||
| 5 | enable: 0 | |
| 6 | tcp_flags_log_level: info | |
| 7 | smurf_log_level: nolog | |
| 178a63be DM |
8 | log_level_in: info |
| 9 | log_level_out: info | |
| 72f63fde | 10 | |
| 530c005e | 11 | # allow more connections (default is 65536) |
| 1ec3e3d0 | 12 | nf_conntrack_max: 196608 |
| 2d404ffc | 13 | |
| 28c082a1 AD |
14 | # reduce conntrack established timeout (default is 432000 - 5days) |
| 15 | nf_conntrack_tcp_timeout_established: 7875 | |
| 16 | ||
| 4ac863a6 DM |
17 | # disable SMURFS filter |
| 18 | nosmurfs: 0 | |
| 19 | ||
| 11f12eae DM |
20 | # filter illegal combinations of TCP flags |
| 21 | tcpflags: 1 | |
| 22 | ||
| 92e976b3 DM |
23 | [RULES] |
| 24 | ||
| dba740a9 DM |
25 | IN SSH(ACCEPT) |
| 26 | OUT SSH(ACCEPT) |