All of lore.kernel.org
 help / color / mirror / Atom feed
From: Scott Lamb <slamb@slamb.org>
To: netfilter@lists.netfilter.org
Subject: conntrack idle timeout
Date: Tue, 25 Feb 2003 21:09:24 -0600	[thread overview]
Message-ID: <3E5C2FE4.3010007@slamb.org> (raw)

Is there a way to control the time it takes for an idle, established TCP 
session to be purged from conntrack's state tables? I'm looking for the 
something like "ipchains -M -S". I saw at 
<http://www.syrlug.org/contrib/ipmasq.html> that there is no iptables 
equivalent, but I'm hoping it's changed since then. Maybe there's a 
sysctl or something?

The problem I'm experiencing is pretty simple. I leave ssh sessions open 
for a while (possibly several hours). I come back to them and get a 
"Connection reset by peer" error and have to open a new session. Back 
when I used ipchains, "iptables -M -S 86400 10 60" or similar solved the 
problem for me.

Thanks,
Scott Lamb



             reply	other threads:[~2003-02-26  3:09 UTC|newest]

Thread overview: 2+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2003-02-26  3:09 Scott Lamb [this message]
2003-02-26  3:42 ` conntrack idle timeout Joel Newkirk

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=3E5C2FE4.3010007@slamb.org \
    --to=slamb@slamb.org \
    --cc=netfilter@lists.netfilter.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body. 
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.