aboutsummaryrefslogtreecommitdiffstats
path: root/sysctl.conf
diff options
context:
space:
mode:
authorBill Nottingham <notting@redhat.com>2009-07-31 09:39:12 -0400
committerBill Nottingham <notting@redhat.com>2009-07-31 09:39:12 -0400
commitaf3d40e8a4293f83abe9efaf8995f28f3287c758 (patch)
tree71d6b0770a978028117fea5467658339851be55c /sysctl.conf
parentfa2a1c8077d7835103f2412e3ef32947d1d988b2 (diff)
downloadinitscripts-af3d40e8a4293f83abe9efaf8995f28f3287c758.tar
initscripts-af3d40e8a4293f83abe9efaf8995f28f3287c758.tar.gz
initscripts-af3d40e8a4293f83abe9efaf8995f28f3287c758.tar.bz2
initscripts-af3d40e8a4293f83abe9efaf8995f28f3287c758.tar.xz
initscripts-af3d40e8a4293f83abe9efaf8995f28f3287c758.zip
Disable netfilter on bridged interfaces. (#512206)
Diffstat (limited to 'sysctl.conf')
-rw-r--r--sysctl.conf5
1 files changed, 5 insertions, 0 deletions
diff --git a/sysctl.conf b/sysctl.conf
index db98922f..5ab82d1b 100644
--- a/sysctl.conf
+++ b/sysctl.conf
@@ -18,3 +18,8 @@ kernel.sysrq = 0
# Controls whether core dumps will append the PID to the core filename.
# Useful for debugging multi-threaded applications.
kernel.core_uses_pid = 1
+
+# Disable netfilter on bridges.
+net.bridge.bridge-nf-call-ip6tables = 0
+net.bridge.bridge-nf-call-iptables = 0
+net.bridge.bridge-nf-call-arptables = 0