D
D
Dmitry2016-07-13 13:10:01
Debian
Dmitry, 2016-07-13 13:10:01

Does not save the net.bridge.bridge-nf-call-iptables setting after reboot. Why?

Good afternoon!
Debian 8 OS.
/etc/sysctl.conf says:
net.bridge.bridge-nf-call-iptables = 0
But after reboot:

sudo sysctl -a | grep bridge-nf-call-iptables
net.bridge.bridge-nf-call-iptables = 1

How to make it keep this value after reboot?
PS: I suspect that the problem is that the server has OpenVPN, which creates a Bridge interface, which overwrites the parameter.

Answer the question

In order to leave comments, you need to log in

1 answer(s)
V
Vladimir, 2016-07-13
@enterdv

it persists just tries to apply before network starts
create script /etc/network/if-up.d/br0

#!/bin/sh

if [ "$IFACE" = "br0" ]; then
    /sbin/sysctl -w net.bridge.bridge-nf-call-arptables=0
    /sbin/sysctl -w net.bridge.bridge-nf-call-iptables=0
    /sbin/sysctl -w net.bridge.bridge-nf-call-ip6tables=0
fi

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question