[pve-devel] [PATCH v2 firewall 0/2] firewall conntrack logging

[David Limbeck]

Adds optional conntrack logging. pvefw-logger is restarted whenever the
config changes.

To enable conntrack logging set 'log_nf_conntrack: 1' in
/etc/pve/nodes/{node}/host.fw
To enable timestamps (start and end time in [DESTROY] messages) set
/proc/sys/net/netfilter/nf_conntrack_timestamp to 1


David Limbeck (2):
  add conntrack logging via libnetfilter_conntrack
  add log_nf_conntrack host firewall option

 debian/control      |  1 +
 src/Makefile        |  2 +-
 src/PVE/Firewall.pm | 19 +++++++++++++-
 src/pvefw-logger.c  | 75 +++++++++++++++++++++++++++++++++++++++++++++++++++++
 4 files changed, 95 insertions(+), 2 deletions(-)

-- 
2.11.0