Hello,

I'm new in the IPF mailling list and I'm proud to
send my first post.

I meet a problem with timeout of my connections.
When I did a ipfstat -t, all TTL sessions don't decrease.
I saw on other Firewall FreeBSD for compare and the TTL's connections decrease.

# uname -a
Linux my-host 2.4.21-20.ELsmp #1 SMP Wed Aug 18 20:46:40 EDT 2004 i686 i686 i386
GNU/Linux

# ipf -V
ipf: IP Filter: v4.1.8 (388)
Kernel: IP Filter: v4.1.8
Running: yes
Log Flags: 0 = none set
Default: pass all, Logging: available
Active list: 0
Feature mask: 0x87

# ipfstat -t
Source IP             Destination IP         ST   PR   #pkts    #bytes       ttl
x.x.x.x               x.x.x.x               5/5  tcp    8119    662396     30:00
x.x.x.x               x.x.x.x               5/5  tcp   13340    537260     30:00
x.x.x.x               x.x.x.x               5/5  tcp    3852    248820     30:00
x.x.x.x               x.x.x.x               0/0  udp     792    107964      2:00
x.x.x.x               x.x.x.x               0/0  udp     792    107964      2:00
x.x.x.x               x.x.x.x               5/5  tcp      20      5028     30:00
x.x.x.x               x.x.x.x               0/0  udp      67      4926      0:12
x.x.x.x               x.x.x.x               0/0  udp      34      2584      0:12
x.x.x.x               x.x.x.x               0/0  udp      30      2118      0:12
x.x.x.x               x.x.x.x               5/5  tcp       5      1308     30:00
x.x.x.x               x.x.x.x               0/0  udp       6       456      0:12
x.x.x.x               x.x.x.x               0/0 icmp       1        84      0:06
x.x.x.x               x.x.x.x               0/0 icmp       1        84      0:06

# ipfstat -s
IP states added:
        23 TCP
        6 UDP
        2 ICMP
        73230 hits
        36852 misses
        0 maximum
        0 no memory
        0 max bucket
        0 maximum
        0 no memory
        12 bkts in use
        13 active
        0 expired
        18 closed

In fact, all sessions terminated by timeout doesn't closed by IPF (0 expired).
The only way for me to closed it is to do : ipf -Fs

I hope I will find precious help.
Regards,

Reply via email to