From 94950f7f267e78c6db5353ee724008b8d5c3fa46 Mon Sep 17 00:00:00 2001 From: bbruns Date: Sun, 6 Apr 2014 17:59:17 +0000 Subject: [PATCH] Updated changelog, misc other things --- ChangeLog | 2 ++ etc/ipv4.conf | 10 +++++++++- etc/ipv6.conf | 10 +++++++++- 3 files changed, 20 insertions(+), 2 deletions(-) diff --git a/ChangeLog b/ChangeLog index 854f62a..33efa48 100644 --- a/ChangeLog +++ b/ChangeLog @@ -12,7 +12,9 @@ - NAT/NETMAP functionality (IPv4/IPv6) - 4/5/2014 - IPv6 NAT/NETMAP is untested, have no internal use for it, let me know if works/doesnt - Forwarding functionality (IPv4/IPv6) - 4/5/2014 + - Adapted to use conntracking if available - 4/6/2014 - Deps on Enablev(4|6)ConnectionTracking for NAT functionality - 4/5/2014 + - Service functionality (IPv4/IPv6) 4/6/2014 =-=-=-=-= PRE 2.0 REWRITE =-=-=-=-= 1.1 - Brielle Bruns diff --git a/etc/ipv4.conf b/etc/ipv4.conf index e3c9733..95c9e5b 100644 --- a/etc/ipv4.conf +++ b/etc/ipv4.conf @@ -29,10 +29,18 @@ Enablev4MSSClamp="yes" # packets it allows and refuses. On highly loaded systems or # ones with low memory, this may be desirable. Everyone else # should probably leave this on. -# Depended on by: Enablev4NAT +# Depended on by: Enablev4NAT Enablev4ConnTrackInterfaces # Values: no | yes (default) Enablev4ConnectionTracking="yes" +# Interfaces to enable connection tracking by default +# List of interfaces to enable ESTABLISHED, RELATED, and INVALID on +# by default. Normally, this is helpful and a good idea. Some +# people with specific requirements may want to disable and do manually +# in the custom rules. +# Values: none | all (default)| interface name +Enablev4ConnTrackInterfaces="all" + # Use /etc/resolv.conf as source for DNS servers that we communicate # with as a client. If you turn this off (recommended if on static IP), # then you will need to manually define the DNS servers you use. diff --git a/etc/ipv6.conf b/etc/ipv6.conf index 3ced607..133804e 100644 --- a/etc/ipv6.conf +++ b/etc/ipv6.conf @@ -29,10 +29,18 @@ Enablev6MSSClamp="yes" # packets it allows and refuses. On highly loaded systems or # ones with low memory, this may be desirable. Everyone else # should probably leave this on. -# Depended on by: Enablev6NAT +# Depended on by: Enablev6NAT Enablev6ConnTrackInterfaces # Values: no | yes (default) Enablev6ConnectionTracking="yes" +# Interfaces to enable connection tracking by default +# List of interfaces to enable ESTABLISHED, RELATED, and INVALID on +# by default. Normally, this is helpful and a good idea. Some +# people with specific requirements may want to disable and do manually +# in the custom rules. +# Values: none | all (default)| interface name +Enablev6ConnTrackInterfaces="all" + # Use /etc/resolv.conf as source for DNS servers that we communicate # with as a client. If you turn this off (recommended if on static IP), # then you will need to manually define the DNS servers you use.