cvsdist 314b6dc
# Load additional iptables modules (nat helpers)
cvsdist 314b6dc
#   Default: -none-
cvsdist 314b6dc
# Space separated list of nat helpers (e.g. 'ip_nat_ftp ip_nat_irc'), which
cvsdist 314b6dc
# are loaded after the firewall rules are applied. Options for the helpers are
cvsdist 314b6dc
# stored in /etc/modules.conf.
cvsdist 314b6dc
#IPTABLES_MODULES=""
cvsdist 314b6dc
cvsdist 314b6dc
# Unload modules on restart and stop
cvsdist 314b6dc
#   Value: yes|no,  default: yes
cvsdist 314b6dc
# This option has to be 'yes' to get to a sane state for a firewall
cvsdist 314b6dc
# restart or stop. Only set to 'no' if there are problems unloading netfilter
cvsdist 314b6dc
# modules.
cvsdist 314b6dc
#IPTABLES_MODULES_UNLOAD="yes"
cvsdist 31d8898
cvsdist 31d8898
# Save current firewall rules on stop.
cvsdist 314b6dc
#   Value: yes|no,  default: no
cvsdist 314b6dc
# Saves all firewall rules to /etc/sysconfig/iptables if firewall gets stopped
cvsdist 314b6dc
# (e.g. on system shutdown).
cvsdist 31d8898
#IPTABLES_SAVE_ON_STOP="no"
cvsdist 31d8898
cvsdist 31d8898
# Save current firewall rules on restart.
cvsdist 314b6dc
#   Value: yes|no,  default: no
cvsdist 314b6dc
# Saves all firewall rules to /etc/sysconfig/iptables if firewall gets
cvsdist 314b6dc
# restarted.
cvsdist 31d8898
#IPTABLES_SAVE_ON_RESTART="no"
cvsdist 31d8898
cvsdist 314b6dc
# Save (and restore) rule and chain counter.
cvsdist 314b6dc
#   Value: yes|no,  default: no
cvsdist 314b6dc
# Save counters for rules and chains to /etc/sysconfig/iptables if
cvsdist 314b6dc
# 'service iptables save' is called or on stop or restart if SAVE_ON_STOP or
cvsdist 314b6dc
# SAVE_ON_RESTART is enabled.
cvsdist 31d8898
#IPTABLES_SAVE_COUNTER="no"
cvsdist 31d8898
cvsdist 31d8898
# Numeric status output
cvsdist 314b6dc
#   Value: yes|no,  default: no
cvsdist 314b6dc
# Print IP addresses and port numbers in numeric format in the status output.
cvsdist 31d8898
#IPTABLES_STATUS_NUMERIC="no"