BACKPORT for issue 817

Adding the ability to set nf_conntrack_max globally.