On 12/19/02 3:52 AM, "Jack Bowling" <[EMAIL PROTECTED]> tapped the keys:

> What is your ip conntrack limit?
> 
> cat /proc/sys/net/ipv4/ip_conntrack_max
> 
> should get you the value. My firewall (Firestarter) has this line:
> 
> # Doubling current limit for ip_conntrack
> if [ -e /proc/sys/net/ipv4/ip_conntrack_max ]; then
> echo 16384 > /proc/sys/net/ipv4/ip_conntrack_max
> fi
> 
> The default is 8192 which is pretty low for your uses.

Yeah, I had the default - 8192.  I doubled it.

> There are some other optimizations you can make.

Where can I learn more about the whole /proc filesystem?

> After you make any changes such as this, all you have to do to initiate the
> New Order is a:
> 
> /sbin/service network restart
> 
> No need for a system reboot.

Great, thanks.  Will just running 'echo 16384 >
/proc/sys/net/ipv4/ip_conntrack_max' survive reboots?  Or should I throw
that in a startup file somewhere?

> One recommendation I would make if you have the Gnome libraries loaded is to
> go to:
[snip]
This is a console only firewall.

> Hope this helps.

It did, very much.  Thank you!
-- 
Jeff Stillwall
[EMAIL PROTECTED]



-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]?subject=unsubscribe
https://listman.redhat.com/mailman/listinfo/redhat-list

Reply via email to