projects
/
15.05
/
openwrt.git
/ commitdiff
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
| commitdiff |
tree
raw
|
patch
| inline |
side by side
(parent:
54e8abb
)
base-files: enable option to skip the netfilter "filter" table for established connec...
author
Felix Fietkau
<nbd@openwrt.org>
Thu, 7 Aug 2014 19:30:36 +0000
(19:30 +0000)
committer
Felix Fietkau
<nbd@openwrt.org>
Thu, 7 Aug 2014 19:30:36 +0000
(19:30 +0000)
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@42048
3c298f89
-4303-0410-b956-
a3cf2f4a3e73
package/base-files/files/etc/sysctl.conf
patch
|
blob
|
history
diff --git
a/package/base-files/files/etc/sysctl.conf
b/package/base-files/files/etc/sysctl.conf
index
9e5714e
..
eb7fe82
100644
(file)
--- a/
package/base-files/files/etc/sysctl.conf
+++ b/
package/base-files/files/etc/sysctl.conf
@@
-21,6
+21,7
@@
net.netfilter.nf_conntrack_max=16384
net.netfilter.nf_conntrack_tcp_timeout_established=7440
net.netfilter.nf_conntrack_udp_timeout=60
net.netfilter.nf_conntrack_udp_timeout_stream=180
+net.netfilter.nf_conntrack_skip_filter=1
# disable bridge firewalling by default
net.bridge.bridge-nf-call-arptables=0