How to set netfilter variables on Kernel???

Jason Opperisano opie at 817west.com
Wed Dec 29 20:18:34 CET 2004


On Tue, 2004-12-28 at 17:09, Jorge Agrelo wrote:
> Does anybody can help me to set or leave by default the following netfilter 
> variables at a Border/Firewall running kernel 2.6.9 and iptables 1.2.11 ???
> 
> ip_conntrack_buckets
> ip_conntrack_generic_timeout
> ip_conntrack_icmp_timeout
> ip_conntrack_max
> ip_conntrack_tcp_timeout_close
> ip_conntrack_tcp_timeout_close_wait
> ip_conntrack_tcp_timeout_established
> ip_conntrack_tcp_timeout_fin_wait
> ip_conntrack_tcp_timeout_last_ack
> ip_conntrack_tcp_timeout_syn_recv
> ip_conntrack_tcp_timeout_syn_sent
> ip_conntrack_tcp_timeout_time_wait
> ip_conntrack_udp_timeout
> ip_conntrack_udp_timeout_stream
> 
> Thanks in advance

if you have to ask--leave them at their default values.

-j

--
"Oh, people can come up with statistics to prove anything, Kent. 14%
 of people know that."
	--The Simpsons




More information about the netfilter mailing list