| 1 | # Load additional iptables modules (nat helpers) | 
|---|
| 2 | #   Default: -none- | 
|---|
| 3 | # Space separated list of nat helpers (e.g. 'ip_nat_ftp ip_nat_irc'), which | 
|---|
| 4 | # are loaded after the firewall rules are applied. Options for the helpers are | 
|---|
| 5 | # stored in /etc/modprobe.conf. | 
|---|
| 6 | IPTABLES_MODULES="" | 
|---|
| 7 |  | 
|---|
| 8 | # Unload modules on restart and stop | 
|---|
| 9 | #   Value: yes|no,  default: yes | 
|---|
| 10 | # This option has to be 'yes' to get to a sane state for a firewall | 
|---|
| 11 | # restart or stop. Only set to 'no' if there are problems unloading netfilter | 
|---|
| 12 | # modules. | 
|---|
| 13 | IPTABLES_MODULES_UNLOAD="yes" | 
|---|
| 14 |  | 
|---|
| 15 | # Save current firewall rules on stop. | 
|---|
| 16 | #   Value: yes|no,  default: no | 
|---|
| 17 | # Saves all firewall rules to /etc/sysconfig/iptables if firewall gets stopped | 
|---|
| 18 | # (e.g. on system shutdown). | 
|---|
| 19 | IPTABLES_SAVE_ON_STOP="no" | 
|---|
| 20 |  | 
|---|
| 21 | # Save current firewall rules on restart. | 
|---|
| 22 | #   Value: yes|no,  default: no | 
|---|
| 23 | # Saves all firewall rules to /etc/sysconfig/iptables if firewall gets | 
|---|
| 24 | # restarted. | 
|---|
| 25 | IPTABLES_SAVE_ON_RESTART="no" | 
|---|
| 26 |  | 
|---|
| 27 | # Save (and restore) rule and chain counter. | 
|---|
| 28 | #   Value: yes|no,  default: no | 
|---|
| 29 | # Save counters for rules and chains to /etc/sysconfig/iptables if | 
|---|
| 30 | # 'service iptables save' is called or on stop or restart if SAVE_ON_STOP or | 
|---|
| 31 | # SAVE_ON_RESTART is enabled. | 
|---|
| 32 | IPTABLES_SAVE_COUNTER="no" | 
|---|
| 33 |  | 
|---|
| 34 | # Numeric status output | 
|---|
| 35 | #   Value: yes|no,  default: yes | 
|---|
| 36 | # Print IP addresses and port numbers in numeric format in the status output. | 
|---|
| 37 | IPTABLES_STATUS_NUMERIC="yes" | 
|---|
| 38 |  | 
|---|
| 39 | # Verbose status output | 
|---|
| 40 | #   Value: yes|no,  default: yes | 
|---|
| 41 | # Print info about the number of packets and bytes plus the "input-" and | 
|---|
| 42 | # "outputdevice" in the status output. | 
|---|
| 43 | IPTABLES_STATUS_VERBOSE="no" | 
|---|
| 44 |  | 
|---|
| 45 | # Status output with numbered lines | 
|---|
| 46 | #   Value: yes|no,  default: yes | 
|---|
| 47 | # Print a counter/number for every rule in the status output. | 
|---|
| 48 | IPTABLES_STATUS_LINENUMBERS="yes" | 
|---|