/proc/sys/net/netfilter/* Variables: nf_log_all_netns - BOOLEAN 0 - disabled (default) not 0 - enabled By default, only init_net namespace can log packets into kernel log with LOG target; this aims to prevent containers from flooding host kernel log. If enabled, this target also works in other network namespaces. This variable is only accessible from init_net.