From: Joel Newkirk <netfilter@newkirk.us>
To: Scott Lamb <slamb@slamb.org>, netfilter@lists.netfilter.org
Subject: Re: conntrack idle timeout
Date: Tue, 25 Feb 2003 22:42:06 -0500 [thread overview]
Message-ID: <200302252242.06586.netfilter@newkirk.us> (raw)
In-Reply-To: <3E5C2FE4.3010007@slamb.org>
On Tuesday 25 February 2003 10:09 pm, Scott Lamb wrote:
> Is there a way to control the time it takes for an idle, established
> TCP session to be purged from conntrack's state tables? I'm looking
> for the something like "ipchains -M -S". I saw at
> <http://www.syrlug.org/contrib/ipmasq.html> that there is no iptables
> equivalent, but I'm hoping it's changed since then. Maybe there's a
> sysctl or something?
/proc/sys/net/ipv4/netfilter/ip_ct_tcp_timeout_established does this, if
you have tcp-window-tracking from patch-o-matic installed. However, the
default timeout apparently is 5 days, so I doubt this is the source of
the problem.
j
> The problem I'm experiencing is pretty simple. I leave ssh sessions
> open for a while (possibly several hours). I come back to them and get
> a "Connection reset by peer" error and have to open a new session.
> Back when I used ipchains, "iptables -M -S 86400 10 60" or similar
> solved the problem for me.
>
> Thanks,
> Scott Lamb
prev parent reply other threads:[~2003-02-26 3:42 UTC|newest]
Thread overview: 2+ messages / expand[flat|nested] mbox.gz Atom feed top
2003-02-26 3:09 conntrack idle timeout Scott Lamb
2003-02-26 3:42 ` Joel Newkirk [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=200302252242.06586.netfilter@newkirk.us \
--to=netfilter@newkirk.us \
--cc=netfilter@lists.netfilter.org \
--cc=slamb@slamb.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.