>Is there maximum limit placed on the number of simultaneous masqueraded
>connections allowed by the kernel?  We have been using masquerade for
>several weeks now, and our user base is about to expand from around 50
>to 150, and I wanted to ensure that we don't start losing people.


The number is compiled into the kernel, and by default it's 4096. You can
change this by editing the file /usr/src/linux/include/net/ip_masq.h. Look
for #define PORT_MASQ_BEGIN and #define PORT_MASQ_END, change
appropriately, and recompile. I made mine 8192 by changing PORT_MASQ_BEGIN
to 57000 and PORT_MASQ_END to PORT_MASQ_BEGIN+8192. I don't know this for
certain, but from the looks of the default numbers I suspect that
PORT_MASQ_END must be no greater than 65535.

Chris Johnson

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
For daily digest info, email [EMAIL PROTECTED]

Reply via email to