[linux-2.6-block.git] / Documentation / networking / netfilter-sysctl.rst

.. SPDX-License-Identifier: GPL-2.0

=========================
Netfilter Sysfs variables
=========================

/proc/sys/net/netfilter/* Variables:
====================================

nf_log_all_netns - BOOLEAN
	- 0 - disabled (default)
	- not 0 - enabled

	By default, only init_net namespace can log packets into kernel log
	with LOG target; this aims to prevent containers from flooding host
	kernel log. If enabled, this target also works in other network
	namespaces. This variable is only accessible from init_net.
Commit	Line	Data
01915330 MCC	1	.. SPDX-License-Identifier: GPL-2.0
	2
	3	=========================
	4	Netfilter Sysfs variables
	5	=========================
	6
2851940f	7	/proc/sys/net/netfilter/* Variables:
01915330	8	====================================
2851940f MK	9
2851940f MK	10	nf_log_all_netns - BOOLEAN
01915330 MCC	11	- 0 - disabled (default)
01915330 MCC	12	- not 0 - enabled
2851940f MK	13
	14	By default, only init_net namespace can log packets into kernel log
	15	with LOG target; this aims to prevent containers from flooding host
	16	kernel log. If enabled, this target also works in other network
	17	namespaces. This variable is only accessible from init_net.