nflog-range becomes nflog-size

5 years ago · 1488e40075
parent d8600e464e
commit 1488e40075
2 changed files with 4 additions and 4 deletions
--- a/bcp38.iptables.v4
+++ b/bcp38.iptables.v4
@ -27,13 +27,13 @@ COMMIT
 *mangle
 :PREROUTING ACCEPT [0:0]
 {% for iface_name, iface_data in pillar['netbox']['interfaces'].items() %}{% if salt['pillar.get']('interfaces:'+iface_name+':netflow') %}
-A PREROUTING -i {{ iface_name }} -j NFLOG --nflog-group 2 --nflog-range 64 --nflog-threshold 10
+-A PREROUTING -i {{ iface_name }} -j NFLOG --nflog-group 2 --nflog-size 64 --nflog-threshold 64
 {% endif %}{% endfor %}
 :INPUT ACCEPT [0:0]
 :FORWARD ACCEPT [0:0]
 :OUTPUT ACCEPT [0:0]
 :POSTROUTING ACCEPT [0:0]
 {% for iface_name, iface_data in pillar['netbox']['interfaces'].items() %}{% if salt['pillar.get']('interfaces:'+iface_name+':netflow') %}
-A POSTROUTING -o {{ iface_name }} -j NFLOG --nflog-group 2 --nflog-range 64 --nflog-threshold 10
+-A POSTROUTING -o {{ iface_name }} -j NFLOG --nflog-group 2 --nflog-size 64 --nflog-threshold 64
 {% endif %}{% endfor %}
 COMMIT
--- a/bcp38.iptables.v6
+++ b/bcp38.iptables.v6
@ -27,13 +27,13 @@ COMMIT
 *mangle
 :PREROUTING ACCEPT [0:0]
 {% for iface_name, iface_data in pillar['netbox']['interfaces'].items() %}{% if salt['pillar.get']('interfaces:'+iface_name+':netflow') %}
-A PREROUTING -i {{ iface_name }} -j NFLOG --nflog-group 2 --nflog-range 64 --nflog-threshold 10
+-A PREROUTING -i {{ iface_name }} -j NFLOG --nflog-group 2 --nflog-size 64 --nflog-threshold 64
 {% endif %}{% endfor %}
 :INPUT ACCEPT [0:0]
 :FORWARD ACCEPT [0:0]
 :OUTPUT ACCEPT [0:0]
 :POSTROUTING ACCEPT [0:0]
 {% for iface_name, iface_data in pillar['netbox']['interfaces'].items() %}{% if salt['pillar.get']('interfaces:'+iface_name+':netflow') %}
-A POSTROUTING -o {{ iface_name }} -j NFLOG --nflog-group 2 --nflog-range 64 --nflog-threshold 10
+-A POSTROUTING -o {{ iface_name }} -j NFLOG --nflog-group 2 --nflog-size 64 --nflog-threshold 64
 {% endif %}{% endfor %}
 COMMIT