* please help - iptables drops tcp/ip connections
@ 2004-09-15 16:31 mohan
2004-09-16 7:49 ` George Alexandru Dragoi
0 siblings, 1 reply; 2+ messages in thread
From: mohan @ 2004-09-15 16:31 UTC (permalink / raw)
To: netfilter
Hi
Please advice, I am running a iptables 1.2.11 on Debian Woody with 2.4.24
kernel. I have a DMZ with 7 machines (4 linux, 3 windows) and 80 Windows
machines on the LAN side.
The windows machines makes a lot of tcp/ip connections with internal
client machines (oracle and java). As certain time (around 4000
simultaneous TCP/IP connections) the machine running iptables drops
connections and failures occur.
Are there any kernel or iptables setting required to be set for such a
large number of connections???
Please advice
Thanks
Mohan
^ permalink raw reply [flat|nested] 2+ messages in thread
* Re: please help - iptables drops tcp/ip connections
2004-09-15 16:31 please help - iptables drops tcp/ip connections mohan
@ 2004-09-16 7:49 ` George Alexandru Dragoi
0 siblings, 0 replies; 2+ messages in thread
From: George Alexandru Dragoi @ 2004-09-16 7:49 UTC (permalink / raw)
To: netfilter
server:~# cat /proc/sys/net/ipv4/netfilter/ip_conntrack_max
12288
This is on a machine with 192M RAM, the default of that sysctl value
is proportionalwith the amount of RAM, but it can be changed, afaik
every ip_conntrack entry (/proc/net/ip_conntrack) needs arround
300bytes from RAM.
On Wed, 15 Sep 2004 22:31:24 +0600 (LKT), mohan@roomsnet.com
<mohan@roomsnet.com> wrote:
> Hi
> Please advice, I am running a iptables 1.2.11 on Debian Woody with 2.4.24
> kernel. I have a DMZ with 7 machines (4 linux, 3 windows) and 80 Windows
> machines on the LAN side.
>
> The windows machines makes a lot of tcp/ip connections with internal
> client machines (oracle and java). As certain time (around 4000
> simultaneous TCP/IP connections) the machine running iptables drops
> connections and failures occur.
>
> Are there any kernel or iptables setting required to be set for such a
> large number of connections???
> Please advice
>
> Thanks
> Mohan
>
>
--
Bla bla
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2004-09-16 7:49 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2004-09-15 16:31 please help - iptables drops tcp/ip connections mohan
2004-09-16 7:49 ` George Alexandru Dragoi
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.