Netfilter Sysfs variables

/proc/sys/net/netfilter/* Variables:

nf_log_all_netns - BOOLEAN

• 0 - disabled (default)

• not 0 - enabled

By default, only init_net namespace can log packets into kernel log with LOG target; this aims to prevent containers from flooding host kernel log. If enabled, this target also works in other network namespaces. This variable is only accessible from init_net.