1 # /etc/pve/local/host.fw
6 tcp_flags_log_level: info
11 # allow more connections (default is 65536)
12 nf_conntrack_max: 196608
14 # reduce conntrack established timeout (default is 432000 - 5days)
15 nf_conntrack_tcp_timeout_established: 7875
17 # disable SMURFS filter
20 # filter illegal combinations of TCP flags