Re: ip_conntrack problems

2012-09-10 Thread Keith Gable
Is there a similar increase in HTTP requests? It sounds to me that your web server is executing your PHP script, which is making requests into CouchDB. So an increase in requests would result in an increase of CouchDB requests. --- Keith Gable A+ Certified Professional Network+ Certified

Re: ip_conntrack problems

2012-09-10 Thread Tim Tisdall
No. It's a cron script that I've been using for a while now. PHP is reporting that fclose() is properly closing the connections, but the fact that /proc/sys/net/ipv4/netfilter/ip_conntrack_count seems to grow rapidly when the script is running seems to indicate otherwise. I recently did an

Re: ip_conntrack problems

2012-09-10 Thread Tim Tisdall
If anyone else comes across this, this seemed to help: iptables -t raw -A PREROUTING -i lo -j NOTRACK iptables -t raw -A OUTPUT -o lo -j NOTRACK On top of already having a rule for -A INPUT -i lo -j ACCEPT and -A OUTPUT -j ACCEPT. This way ip_conntrack isn't involved when making connections to

ip_conntrack problems

2012-09-09 Thread Tim Tisdall
I'm using iptables on my system to block external access to everything except for explicit ports (http, https, ssh, etc). I'm not sure how, but I'm getting “nf_conntrack: table full, dropping packet.” and “TCP: time wait bucket table overflow” because the number of connections is past the maximum