[pve-devel] nf_conntrack: table full, dropping packet error

[Dietmar Maurer]

> I had verify with a debian kernel, nf_conntrack in not enable
> 
> kvm5:~# cat /proc/net/nf_conntrack
> cat: /proc/net/nf_conntrack: No such file or directory

Well, it is compile as module on our kernel:

CONFIG_NF_CONNTRACK=m

> Alternativly, we can disable it with kernel option
> 
> 
> Linux Kernel Configuration: Bridged traffic with iptables Networking  --->
>   Networking support  --->
>     Networking options  --->
>       Network packet filtering framework (Netfilter)  --->
>        [*] Bridged IP/ARP packets filtering

Sorry, but what option is that exactly?