/* HINT: Search archives @ http://www.indyramp.com/masq/ before posting!
/* ALSO: Don't quote this header. It makes you look lame :-) */
Koen Hufkens wrote:
> I configured a linuxbox for IP masquerading and everything works fine. 3 cheers
> for linux howto's :-). I only have one question left. What's the purpose of the
> MASQ timeouts? Maybe a dumb question but I really want to know.
the kernel needs to remember the mappings between internal src ipaddr/ports
and external dst ipaddr/ports so that it knows where to send incoming packets
that are replies for previous, outgoing, masqueraded packets. there has to
be some way to tell the kernel how long to store these mappings.
if masquerading stops working when there's network congestion, maybe
increasing the timeouts will fix it. if the kernel is using too much
memory (unlikely) because of the vast number of masqueraded connections,
maybe reducing the timeouts will fix it.
i don't worry about the timeouts. everything just works :)
raf
_______________________________________________
Masq maillist - [EMAIL PROTECTED]
Admin requests can be handled at http://www.indyramp.com/masq-list/ --
THIS INCLUDES UNSUBSCRIBING!
or email to [EMAIL PROTECTED]
PLEASE read the HOWTO and search the archives before posting.
You can start your search at http://www.indyramp.com/masq/
Please keep general linux/unix/pc/internet questions off the list.