![]() | |||||||||||||
Messages in this thread |
1.0 References: <d5be23434eca88346e0e22ff4d08def0@shell.sendon.net> <19980923081912.4173.qmail@defiant.cqc.com> Message-Id: <73f5dd3ce38518442b15c7dab4461b3f@shell.sendon.net> Quoting pacman (pacman-kernel@cqc.com): > Steve Thompson writes the following:> >I don't know about anyone else, but I find that the default value of > >15 minutes for IP_MASQ_S_ESTABLISHED seems a little short. I may be slightly> > Isn't this the same variable that is set by ipfwadm -M -s ...? Well, I have had "ipchains -M -S 7200 0 3600" in my startup scripts for ages. The documentation states that the parameters are for "TCP sessions, TCP sessions after receiving a FIN packet, and UDP packets". Since the 7200 value was certainly not working, I figured that something else was wrong ... and that appears to be the case. I just executed "ipchains -M -S 20 0 0", logged in to a remote host, and waited thirty seconds. The connection did not go away, as I assume it should. I admit the possibility that I am doing something wrong, but I can't imagine what that would be. [ After sending off a reply to pacman, another message indicated that the feature was broken in the 2.1 series, though I have had this problem under 2.0 as well.] - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.rutgers.edu Please read the FAQ at http://www.tux.org/lkml/ | ||||||||||||
| Last update: 2005-03-22 12:44 [from the cache] ©2003-2008 | |||||||||||||