From: Cedric Blancher <blancher@cartel-securite.fr>
To: jrw@ngi.be
Cc: netfilter@lists.netfilter.org
Subject: Re: ip_conntrack
Date: 17 Oct 2002 12:12:33 +0200 [thread overview]
Message-ID: <1034849553.13111.2.camel@elendil> (raw)
In-Reply-To: <A4C806B83AC1974E8A2AC21267B922D62D272E@exchange.int.ngi.be>
Le jeu 17/10/2002 à 11:37, jrw@ngi.be a écrit :
> How could I remove a connection listed in the ip_conntrack file?
> Because, now, I must wait until the timeout...
See ipconntrack thread : you can't.
> And if it's not possible, is there a way to change the timeout?
Apply patch-o-matic tcp-window-tracking patch which provide a set of
sysctl (/proc/sys/net/ipv4/netfilter/) to tweak conntrack behaviours,
such as timeout. As far as I can remember, this feature has been
released separatly from TCP windows tracking and posted to devel mailing
list, but I can't find related post :/
Another way is to directly hack kernel sources to modify thoses timeouts
into header files.
--
Cédric Blancher <blancher@cartel-securite.fr>
Consultant en sécurité des systèmes et réseaux - Cartel Sécurité
Tél: +33 (0)1 44 06 97 87 - Fax: +33 (0)1 44 06 97 99
PGP KeyID:157E98EE FingerPrint:FA62226DA9E72FA8AECAA240008B480E157E98EE
next prev parent reply other threads:[~2002-10-17 10:12 UTC|newest]
Thread overview: 15+ messages / expand[flat|nested] mbox.gz Atom feed top
2002-10-17 9:37 ip_conntrack jrw
2002-10-17 10:11 ` ip_conntrack Antony Stone
2002-10-17 10:12 ` Cedric Blancher [this message]
2002-10-19 2:31 ` ip_conntrack Andrew Smith
-- strict thread matches above, loose matches on Subject: below --
2002-11-25 12:00 ip_conntrack Warren P
2002-11-25 15:44 ` ip_conntrack Ard van Breemen
2003-05-21 20:18 ip_conntrack netfilter_user
2003-05-21 21:53 ip_conntrack George Vieira
2003-09-11 20:19 ip_conntrack Warren P
2003-09-15 16:48 ` ip_conntrack Arnt Karlsen
2003-09-15 20:43 ` ip_conntrack NightHawk
2003-09-15 23:40 ` ip_conntrack Security
2003-09-16 1:27 ` ip_conntrack pengjie
2003-10-27 19:23 ` ip_conntrack Warren P
2005-06-14 12:07 IP Conntrack faton kurteshi
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=1034849553.13111.2.camel@elendil \
--to=blancher@cartel-securite.fr \
--cc=jrw@ngi.be \
--cc=netfilter@lists.netfilter.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox