netfilter-sysctl.rst 528 B

1234567891011121314151617
  1. .. SPDX-License-Identifier: GPL-2.0
  2. =========================
  3. Netfilter Sysfs variables
  4. =========================
  5. /proc/sys/net/netfilter/* Variables:
  6. ====================================
  7. nf_log_all_netns - BOOLEAN
  8. - 0 - disabled (default)
  9. - not 0 - enabled
  10. By default, only init_net namespace can log packets into kernel log
  11. with LOG target; this aims to prevent containers from flooding host
  12. kernel log. If enabled, this target also works in other network
  13. namespaces. This variable is only accessible from init_net.