ip_conntrack table is full with razor requests. Something isn't timing out.

[Michael Tautschnig]

>>
>> Thanks for your note on this... looks like a netfilter bug to me.  Did
>> you have any problems running 2.6.9?  I am looking at the diffs and it
>> looks like there are a number of changes to the ip_conntrack code in
>> 2.6.10.  When reading though the changelog for 2.6.11-rc5 it doesn't
>> appear that any of these issues are resolved, so I may have to go back
>> to 2.6.9 if it is known to work.
>
>  Could you try whether or not the following patch fixes your problem?
>
> https://lists.netfilter.org/pipermail/netfilter-devel/2004-December/017908.html
>
Thanks - it seems as if it did the trick! Connections are set up properly 
and marked as CLOSE afterwards, and cleaned out properly. Great!

Thank you very much,
Michael