netfilter-sysctl.rst

 1.. SPDX-License-Identifier: GPL-2.0
 2
 3=========================
 4Netfilter Sysfs variables
 5=========================
 6
 7/proc/sys/net/netfilter/* Variables:
 8====================================
 9
10nf_log_all_netns - BOOLEAN
11	- 0 - disabled (default)
12	- not 0 - enabled
13
14	By default, only init_net namespace can log packets into kernel log
15	with LOG target; this aims to prevent containers from flooding host
16	kernel log. If enabled, this target also works in other network
17	namespaces. This variable is only accessible from init_net.