Exclude loopback from conntrack

2019-08-30 00:33:49 +00:00
parent dfeed33f2b
commit 41c2343f75
3 changed files with 18 additions and 0 deletions
--- a/roles/firewall/defaults/main.yaml
+++ b/roles/firewall/defaults/main.yaml
@ -29,6 +29,8 @@ firewall_drop_icmp_flood: true
 firewall_limit_icmp_flood_seconds: 1
 firewall_limit_icmp_flood_hitcount: 6

+firewall_loopback_notrack: true
+
 firewall_limited_tcp_ports: {}

 firewall_allowed_tcp_ports: {}