On Tue, 14 Jun 2005, Martti Kuparinen wrote:

We have IPF 4.1.8 (NetBSD/i386 3.0_BETA) in our firewall and we see
a lot of entries like this in memory according to ipfstat -t:

x.x.x.x,2913    x.x.x.x,80      0/5  tcp     197     93564  105:49:31
x.x.x.x,2536    x.x.x.x,80      2/5  tcp     181     93230  108:28:36

How can I remove these? Is there any way to set the lifetime to
something small until the TCP connection is fully established?

Please note that I want to have the lifetime 120 hrs for established
connectons but non-established should go away quite fast (say 10 minutes).
Is this possible with IPF?

Martti

Reply via email to