T1011: enable conntrack helper by default.

vyos · Nov 18, 2018 · c062059 · c062059
1 parent 6ab6a0a
commit c062059
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/sysconf/vyatta-sysctl.conf b/sysconf/vyatta-sysctl.conf
@@ -77,3 +77,6 @@ net.ipv6.conf.all.keep_addr_on_down=1
 
 # Default value of 20 seems to interfere with larger OSPF and VRRP setups
 net.ipv4.igmp_max_memberships = 512
+
+# Enable conntrack helper by default
+net.netfilter.nf_conntrack_helper=1