From: Jozsef Kadlecsik <kadlec@blackhole.kfki.hu>
To: Krzysztof Oledzki <ole@ans.pl>
Cc: Netfilter Developer Mailing List
<netfilter-devel@vger.kernel.org>,
Patrick McHardy <kaber@trash.net>
Subject: Re: PATCH: "invalid SYNIN=" - a patch and a question
Date: Thu, 4 Oct 2007 09:26:26 +0200 (CEST) [thread overview]
Message-ID: <Pine.LNX.4.64.0710040908060.1587@blackhole.kfki.hu> (raw)
In-Reply-To: <Pine.LNX.4.64.0710032152430.5307@bizon.gios.gov.pl>
On Wed, 3 Oct 2007, Krzysztof Oledzki wrote:
> Does this same error exist in 2.6.22?
Yes, and in earlier releases as well: as far as I see the bug was
introduced by nf_conntrack.
> BTW: what is your opinion about
> net.netfilter.nf_conntrack_tcp_timeout_time_wait?
We already "violate" the RFC. And considering other IP stacks, in order
to avoid all unnecessarily blocked late packets, we should probably set
the timeout value back to 2*MSL.
By setting it to 1MSL we try to find the proper balance between "not too
much blocked late packets" and "get rid of conntrack entries as fast as
possible".
Best regards,
Jozsef
-
E-mail : kadlec@blackhole.kfki.hu, kadlec@sunserv.kfki.hu
PGP key : http://www.kfki.hu/~kadlec/pgp_public_key.txt
Address : KFKI Research Institute for Particle and Nuclear Physics
H-1525 Budapest 114, POB. 49, Hungary
next prev parent reply other threads:[~2007-10-04 7:26 UTC|newest]
Thread overview: 40+ messages / expand[flat|nested] mbox.gz Atom feed top
2007-09-26 12:27 PATCH: "invalid SYNIN=" - a patch and a question Krzysztof Oledzki
2007-10-03 13:06 ` Krzysztof Oledzki
2007-10-03 13:54 ` Jozsef Kadlecsik
2007-10-03 19:57 ` Krzysztof Oledzki
2007-10-04 7:26 ` Jozsef Kadlecsik [this message]
2007-10-04 5:59 ` Patrick McHardy
2007-10-04 7:52 ` Jozsef Kadlecsik
2007-10-04 7:59 ` Patrick McHardy
2007-10-04 8:41 ` Jozsef Kadlecsik
2007-10-05 20:06 ` Krzysztof Oledzki
2007-10-08 9:32 ` Jozsef Kadlecsik
2007-10-08 9:45 ` Jozsef Kadlecsik
2007-10-08 13:56 ` Krzysztof Oledzki
2007-10-08 14:01 ` Krzysztof Oledzki
2007-10-08 13:58 ` Krzysztof Oledzki
2007-10-08 14:01 ` Jozsef Kadlecsik
2007-10-08 17:28 ` Krzysztof Oledzki
2007-10-09 8:11 ` Jozsef Kadlecsik
2007-10-09 13:17 ` Krzysztof Oledzki
2007-10-09 13:22 ` Krzysztof Oledzki
2007-10-08 16:39 ` Patrick McHardy
2007-10-08 17:23 ` Krzysztof Oledzki
2007-10-04 6:15 ` Patrick McHardy
2007-10-10 19:26 ` Jozsef Kadlecsik
2007-10-11 4:04 ` Patrick McHardy
2007-10-11 13:52 ` Krzysztof Oledzki
2007-10-31 19:34 ` Krzysztof Oledzki
2007-11-05 11:11 ` Patrick McHardy
2007-11-14 21:46 ` [stable] " Greg KH
2007-10-11 13:50 ` Krzysztof Oledzki
[not found] ` <Pine.LNX.4.64.0710112238010.29814@bizon.gios.gov.pl>
2007-10-11 22:42 ` Jozsef Kadlecsik
2007-10-12 10:09 ` Krzysztof Oledzki
2007-10-12 14:48 ` Jozsef Kadlecsik
2007-10-12 18:09 ` Krzysztof Oledzki
2007-10-17 17:41 ` Jozsef Kadlecsik
2007-10-17 20:08 ` Krzysztof Oledzki
2007-10-18 8:43 ` Patrick McHardy
2007-10-04 5:45 ` Patrick McHardy
2007-10-17 20:13 ` Krzysztof Oledzki
2007-10-18 8:43 ` Patrick McHardy
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=Pine.LNX.4.64.0710040908060.1587@blackhole.kfki.hu \
--to=kadlec@blackhole.kfki.hu \
--cc=kaber@trash.net \
--cc=netfilter-devel@vger.kernel.org \
--cc=ole@ans.pl \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).