Can not block ping?

[dietmar]

Ok how does these 2 settings at node level work then.

I don't really get the question sorry. CT is always enabled, and you can adjust some values with above settings.

 

[ozgurerdogan]

At node level, firewall can be off. Even it is off, will below settings still be adjusted?

nf_conntrack_max
nf_conntrack_tcp_timeout_established