Netfilter Sysfs variables

/proc/sys/net/netfilter/* Variables:

nf_log_all_netns - BOOLEAN
  • 0 - disabled (default)

  • not 0 - enabled

By default, only init_net namespace can log packets into kernel log with LOG target; this aims to prevent containers from flooding host kernel log. If enabled, this target also works in other network namespaces. This variable is only accessible from init_net.