Re: question regarding iptables tuning (was Re: iptables denial of services)

[Friedrich Lobenstock <fl@fl.priv.at>]

Friedrich Lobenstock wrote on 17.04.2004 21:58 MET:
> Pablo Neira wrote on 17.04.2004 21:08 MET:
> 
>> Hi Friedrich,
>>
>> Friedrich Lobenstock wrote:
>>
>>> Any suggestions for those parameters that are based on your experiences?
>>
>>
>>
>> maybe this could be interesting for you, it's related to conntrack 
>> system.
>>
>> http://www.wallfire.org/misc/netfilter_conntrack_perf.txt
>> http://bei.bof.de/
>>
>> I don't know how up to date they are, actually they are still in my 
>> queue of things to be read ;-).
> 
> 
> BIG THANKS for the links!
> 
> May I suggest to add the first link to the faq?
> 

As the hash algorithm needs the hash size to be prime, here a link to find 
a fitting one http://www.prime-numbers.org/ which should be linked right 
after the above mentioned link.

-- 
MfG / Regards
Friedrich Lobenstock