From 57b7d813c73fdc7f3c3254e7107ffa045db12702 Mon Sep 17 00:00:00 2001 From: Molly Miller Date: Sat, 6 Jul 2019 01:36:16 +0000 Subject: user/iptables: new package There is some optional functionality available which requires further libraries (libmnl for the ability to work over nf_tables as opposed to the legacy ip{,6}_tables kernel module, libnetfilter_conntrack for connlabel matching), but these libraries aren't yet packaged. --- user/iptables/iptables.confd | 14 ++++++++++++++ 1 file changed, 14 insertions(+) create mode 100644 user/iptables/iptables.confd (limited to 'user/iptables/iptables.confd') diff --git a/user/iptables/iptables.confd b/user/iptables/iptables.confd new file mode 100644 index 000000000..c9e5a685c --- /dev/null +++ b/user/iptables/iptables.confd @@ -0,0 +1,14 @@ +# /etc/conf.d/iptables + +# Location in which iptables initscript will save set rules on +# service shutdown +IPTABLES_SAVE="/etc/iptables/rules-save" + +# Options to pass to iptables-save and iptables-restore +SAVE_RESTORE_OPTIONS="-c" + +# Save state on stopping iptables +SAVE_ON_STOP="yes" + +# Enable/disable IPv4 forwarding with the rules +IPFORWARD="no" -- cgit v1.2.3-70-g09d2