firewalld-users February 2024

firewalld-users@lists.fedorahosted.org

3 participants
2 discussions

sip service - nf_conntrack_sip helper module - setting sip_timeout value
by solarmon 16 Feb '24

16 Feb '24

Hi, I understand that the nf_conntrack_sip module is used as the helper module for the 'sip' service. I understand that firewalld loads up the modules using this modprobe config file: /etc/modprobe.d/firewalld-sysctls.conf However, what I would like to do it set the nf_conntrack_sip 'sip_timeout' option value. The default is 3600 and this can be seen and set in realtime at: /sys/module/nf_conntrack_sip/parameters/sip_timeout However, I would like to get firewalld to set the sip_timeout value when it loads the module. I have tried create a specific modprobe config file at /etc/modprobe.d/50-nf_conntrack_sip.conf with the following contents: options nf_conntrack_sip sip_timeout=300 However, this does not seem to work and after a reboot, the /sys/module/nf_conntrack_sip/parameters/sip_timeout value is still 3600. Is there a way to specify the sip_timer option when defining the sip service in firewalld? Cheers! solarmon

2 2

log REJECT/DROP to journald or file
by Marco Moock 14 Feb '24

14 Feb '24

Hello! Is it possible to log the REJECT/DROP lines to journald, or a log file? Currently it logs to dmesg and that is rather nasty when the tty needs to be used. -- kind regards Marco Send spam to ichschickereklame(a)cartoonies.org

1 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

firewalld-users February 2024