Linux Netfilter discussions
 help / color / mirror / Atom feed
From: "Warren P" <warren-cpt@webmail.co.za>
To: pengjie <bill.peng@ocamar.com>,
	Warren P <weatherman@webmail.co.za>,
	netfilter@lists.netfilter.org
Subject: Re: ip_conntrack
Date: Mon, 27 Oct 2003 21:23:48 +0200	[thread overview]
Message-ID: <web-13621304@mail03.infosat.net> (raw)
In-Reply-To: <001501c37bf1$bab38d90$0f640a0a@acamarpeng>

hi

I've upgraded the server to Redhat 8 ... I seem to be worst
off now ... I'm getting the error "kernel: ip_conntrack:
table full, dropping packet." every few days now instead of
every few months as with Rehar 7.3

Question1: What are the dangers of increasing
/proc/sys/net/ipv4/ip_conntrack_max (I've currently got
1gig of RAM in my server and the current value of
ip_conntrack_max is 65528).

Question2: Do i really need ip_conntrack? Since I'm only
using it for my transparent proxy.

Question3: If i don't need it in order to user IP Tables,
how do i get rid of it safely? Will rmmod ip_conntrack.o be
sufficient and save?

Regards,
Warren P

------------------------------------------------------------


On Tue, 16 Sep 2003 09:27:44 +0800
 "pengjie" <bill.peng@ocamar.com> wrote:
> try the 2.4.21.
>   ----- Original Message ----- 
>   From: Warren P 
>   To: netfilter@lists.netfilter.org 
>   Sent: Friday, September 12, 2003 4:19 AM
>   Subject: ip_conntrack
> 
> 
>   hi
> 
>   does anyone know how to clear/flush the ip_conntrack
> table. Every 4 to 6 months i need to reboot my server
> because it drops packets and complains that the table is
> full ...
> 
>   Regards,
>   Warren P

Regards,
Warren P
___________________________________________
 Look Good, Feel Good www.healthiest.co.za



  reply	other threads:[~2003-10-27 19:23 UTC|newest]

Thread overview: 15+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2003-09-11 20:19 ip_conntrack Warren P
2003-09-15 16:48 ` ip_conntrack Arnt Karlsen
2003-09-15 20:43 ` ip_conntrack NightHawk
2003-09-15 23:40 ` ip_conntrack Security
2003-09-16  1:27 ` ip_conntrack pengjie
2003-10-27 19:23   ` Warren P [this message]
  -- strict thread matches above, loose matches on Subject: below --
2005-06-14 12:07 IP Conntrack faton kurteshi
2003-05-21 21:53 ip_conntrack George Vieira
2003-05-21 20:18 ip_conntrack netfilter_user
2002-11-25 12:00 ip_conntrack Warren P
2002-11-25 15:44 ` ip_conntrack Ard van Breemen
2002-10-17  9:37 ip_conntrack jrw
2002-10-17 10:11 ` ip_conntrack Antony Stone
2002-10-17 10:12 ` ip_conntrack Cedric Blancher
2002-10-19  2:31   ` ip_conntrack Andrew Smith

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=web-13621304@mail03.infosat.net \
    --to=warren-cpt@webmail.co.za \
    --cc=bill.peng@ocamar.com \
    --cc=netfilter@lists.netfilter.org \
    --cc=weatherman@webmail.co.za \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox