sysctl value not loaded for modules

[fsteinel]

sysctl doesn't load the values for modules. Add those to the /etc/module file

nf_defrag_ipv4
nf_defrag_ipv6
nf_conntrack
nf_conntrack_ipv4
nf_conntrack_ipv6
nf_nat
iptable_nat
ipt_MASQUERADE
xt_comment
xt_conntrack
xt_recent
xt_tcpudp

list of modules determined via:

lsmod |grep -e ^ip -e ^nf_ -e ^xt|sort|less

Tested via

• before the fix

  sysctl -a > tag-2017-01-14-pre-mod-sysctl-fix

• apply the above fix
• after the fix

  sysctl -a > tag-2017-01-14-after-mod-sysctl-fix
  diff -Nup tag-2017-01-14-pre-mod-sysctl-fix tag-2017-01-14-after-mod-sysctl-fix |less

  Found this depency while backtracking why net.netfilter.nf_conntrack_max=1048576 was not set. see #172 for the new file /etc/sysctl.d/conntrack.conf The file /etc/sysctl.d/conntrack.conf is created at manifests/system.pp

[rubo77]

maybe this is fixed with the hint: https://github.com/ffnord/ffnord-puppet-gateway#on-debian-jessie

modprobe ip_tables
modprobe ip_conntrack