cvsdist 314b6d
# Load additional iptables modules (nat helpers)
cvsdist 314b6d
#   Default: -none-
cvsdist 314b6d
# Space separated list of nat helpers (e.g. 'ip_nat_ftp ip_nat_irc'), which
cvsdist 314b6d
# are loaded after the firewall rules are applied. Options for the helpers are
62b594
# stored in /etc/modprobe.conf.
17fd75
IPTABLES_MODULES=""
cvsdist 314b6d
cvsdist 31d889
# Save current firewall rules on stop.
cvsdist 314b6d
#   Value: yes|no,  default: no
cvsdist 314b6d
# Saves all firewall rules to /etc/sysconfig/iptables if firewall gets stopped
cvsdist 314b6d
# (e.g. on system shutdown).
17fd75
IPTABLES_SAVE_ON_STOP="no"
cvsdist 31d889
cvsdist 31d889
# Save current firewall rules on restart.
cvsdist 314b6d
#   Value: yes|no,  default: no
cvsdist 314b6d
# Saves all firewall rules to /etc/sysconfig/iptables if firewall gets
cvsdist 314b6d
# restarted.
17fd75
IPTABLES_SAVE_ON_RESTART="no"
cvsdist 31d889
cvsdist 314b6d
# Save (and restore) rule and chain counter.
cvsdist 314b6d
#   Value: yes|no,  default: no
cvsdist 314b6d
# Save counters for rules and chains to /etc/sysconfig/iptables if
cvsdist 314b6d
# 'service iptables save' is called or on stop or restart if SAVE_ON_STOP or
cvsdist 314b6d
# SAVE_ON_RESTART is enabled.
17fd75
IPTABLES_SAVE_COUNTER="no"
cvsdist 31d889
cvsdist 31d889
# Numeric status output
17fd75
#   Value: yes|no,  default: yes
cvsdist 314b6d
# Print IP addresses and port numbers in numeric format in the status output.
17fd75
IPTABLES_STATUS_NUMERIC="yes"
17fd75
adba86
# Verbose status output
adba86
#   Value: yes|no,  default: yes
adba86
# Print info about the number of packets and bytes plus the "input-" and
adba86
# "outputdevice" in the status output.
adba86
IPTABLES_STATUS_VERBOSE="no"
adba86
adba86
# Status output with numbered lines
adba86
#   Value: yes|no,  default: yes
adba86
# Print a counter/number for every rule in the status output.
adba86
IPTABLES_STATUS_LINENUMBERS="yes"
679113
679113
# Reload sysctl settings on start and restart
679113
#   Default: -none-
679113
# Space separated list of sysctl items which are to be reloaded on start.
679113
# List items will be matched by fgrep.
679113
#IPTABLES_SYSCTL_LOAD_LIST=".nf_conntrack .bridge-nf"
671406
671406
# Set wait option for iptables-restore calls in seconds
671406
#   Default: 600
671406
# Set to 0 to deactivate the wait.
671406
#IPTABLES_RESTORE_WAIT=600
671406
671406
# Set wait interval option for iptables-restore calls in microseconds
671406
#   Default: 1000000
671406
# Set to 100000 to try to get the lock every 100000 microseconds, 10 times a
671406
# second.
671406
# Only usable with IPTABLES_RESTORE_WAIT > 0
671406
#IPTABLES_RESTORE_WAIT_INTERVAL=1000000