[CentOS] ip_conntrack: table full, dropping packet.

2008-04-18 Thread Masry Alex
I was trying to do what the article at http://www.austintek.com/LVS/LVS-HOWTO/HOWTO/LVS-HOWTO.performance.html#conntrack_filling_tables http://www.austintek.com/LVS/LVS-HOWTO/HOWTO/LVS-HOWTO.performance.html#conntrack_filling_tables%3C/blockquote%3E%3C/div%3E suggested My iptables rules are

Re: [CentOS] ip_conntrack: table full, dropping packet.

2008-04-18 Thread John R Pierce
Masry Alex wrote: is there a way to completely disable ip_conntrack ? without connection tracking, NAT simply won't work. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] ip_conntrack: table full, dropping packet.

2008-04-18 Thread Florin Andrei
John R Pierce wrote: Masry Alex wrote: is there a way to completely disable ip_conntrack ? without connection tracking, NAT simply won't work. With recent kernels, it is possible to do 1:1 NAT (mapping one private address to exactly one public IP alias on the external interface) without

Re: [CentOS] ip_conntrack: table full, dropping packet.

2008-04-18 Thread Robert Spangler
On Friday 18 April 2008 12:23, Masry Alex wrote: #that's what the mentioned article suggested..I'm not sure it's working! *raw -A PREROUTING -p tcp -m tcp --dport 80 -j NOTRACK Do you have a chain called NOTRACK? What is setup under it? COMMIT *filter -A INPUT -i lo -j ACCEPT -A

Re: [CentOS] ip_conntrack: table full, dropping packet.

2008-04-18 Thread Stephen John Smoogen
On Fri, Apr 18, 2008 at 10:23 AM, Masry Alex [EMAIL PROTECTED] wrote: I was trying to do what the article at http://www.austintek.com/LVS/LVS-HOWTO/HOWTO/LVS-HOWTO.performance.html#conntrack_filling_tables suggested My iptables rules are #that's what the