| 1 | # Load additional ip6tables modules (nat helpers) |
|---|
| 2 | # Default: -none- |
|---|
| 3 | # Space separated list of nat helpers (e.g. 'ip_nat_ftp ip_nat_irc'), which |
|---|
| 4 | # are loaded after the firewall rules are applied. Options for the helpers are |
|---|
| 5 | # stored in /etc/modprobe.conf. |
|---|
| 6 | IP6TABLES_MODULES="" |
|---|
| 7 | |
|---|
| 8 | # Unload modules on restart and stop |
|---|
| 9 | # Value: yes|no, default: yes |
|---|
| 10 | # This option has to be 'yes' to get to a sane state for a firewall |
|---|
| 11 | # restart or stop. Only set to 'no' if there are problems unloading netfilter |
|---|
| 12 | # modules. |
|---|
| 13 | IP6TABLES_MODULES_UNLOAD="yes" |
|---|
| 14 | |
|---|
| 15 | # Save current firewall rules on stop. |
|---|
| 16 | # Value: yes|no, default: no |
|---|
| 17 | # Saves all firewall rules to /etc/sysconfig/ip6tables if firewall gets stopped |
|---|
| 18 | # (e.g. on system shutdown). |
|---|
| 19 | IP6TABLES_SAVE_ON_STOP="no" |
|---|
| 20 | |
|---|
| 21 | # Save current firewall rules on restart. |
|---|
| 22 | # Value: yes|no, default: no |
|---|
| 23 | # Saves all firewall rules to /etc/sysconfig/ip6tables if firewall gets |
|---|
| 24 | # restarted. |
|---|
| 25 | IP6TABLES_SAVE_ON_RESTART="no" |
|---|
| 26 | |
|---|
| 27 | # Save (and restore) rule and chain counter. |
|---|
| 28 | # Value: yes|no, default: no |
|---|
| 29 | # Save counters for rules and chains to /etc/sysconfig/ip6tables if |
|---|
| 30 | # 'service ip6tables save' is called or on stop or restart if SAVE_ON_STOP or |
|---|
| 31 | # SAVE_ON_RESTART is enabled. |
|---|
| 32 | IP6TABLES_SAVE_COUNTER="no" |
|---|
| 33 | |
|---|
| 34 | # Numeric status output |
|---|
| 35 | # Value: yes|no, default: yes |
|---|
| 36 | # Print IP addresses and port numbers in numeric format in the status output. |
|---|
| 37 | IP6TABLES_STATUS_NUMERIC="yes" |
|---|
| 38 | |
|---|
| 39 | # Verbose status output |
|---|
| 40 | # Value: yes|no, default: yes |
|---|
| 41 | # Print info about the number of packets and bytes plus the "input-" and |
|---|
| 42 | # "outputdevice" in the status output. |
|---|
| 43 | IP6TABLES_STATUS_VERBOSE="no" |
|---|
| 44 | |
|---|
| 45 | # Status output with numbered lines |
|---|
| 46 | # Value: yes|no, default: yes |
|---|
| 47 | # Print a counter/number for every rule in the status output. |
|---|
| 48 | IP6TABLES_STATUS_LINENUMBERS="yes" |
|---|