--- Vinu Chandran <[EMAIL PROTECTED]> wrote:
> 
> I'm getting errors on my STDOUT like "iptables
> ip_conntrack table full dropping packets". I googled
> this error and found that increasing the size of
> /proc/sys/net/ipv4/ip_conntrack_max to a bigger
> 

If ur lucky then increasing ip_conntrack_max will be
all that's reqd. Else it could be that connections get
dropped unnaturally, either due to some peculiarity of
ur traffic or a DoS attempt. In either case, conntrack
will not notice that the connection went down, and ur
tables will keep filling up with 'ghost' connections. 

More info
<http://lists.netfilter.org/pipermail/netfilter-devel/2002-June/004906.html>
<http://www.mail-archive.com/netfilter-devel%40lists.samba.org/msg01611.html>


__________________________________________________
Do you Yahoo!?
New DSL Internet Access from SBC & Yahoo!
http://sbc.yahoo.com


-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
linux-india-help mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/linux-india-help

Reply via email to