Re: ip_conntrack_max

[Antony Stone <Antony@Soft-Solutions.co.uk>]

On Thursday 08 July 2004 10:38 am, Fallucchi Antonio wrote:

> hi
>
> i have the problem width "ip_conntrack: table full, dropping packet."
>
> what is the good and max dimension  of the ip_conntrack_max ?

The answer to this depends on:

1. How many connections you need to support through your firewall.
2. How much memory you have in your machine (each connection table entry uses 
a small amount of memory, therefore this is what sets the limit on the 
maximum size you can make it on a given machine.

What is the output of "wc -l /proc/net/ip_conntrack", and how much memory do 
you have in your system?

Regards,

Antony.

-- 
In science, one tries to tell people
in such a way as to be understood by everyone
something that no-one ever knew before.

In poetry, it is the exact opposite.

 - Paul Dirac

                                                     Please reply to the list;
                                                           please don't CC me.