On Friday, 21 February 2003, at 15:52:55 +0100, Patrick Nagelschmidt wrote: > and if i get ip_conntrack_proto_tcp.c right, the default timeout for > ESTABLISHED is 5 days. but i dont want to wait that long :( > You are right, some people change this default value in the sources and recompile because they think this 5-day period is way too high. The only way I know to flush the connection tracking information is to unload ip_conntrack, and all the modules that depend on it. Hope it helps. -- Jose Luis Domingo Lopez Linux Registered User #189436 Debian Linux Sid (Linux 2.4.20-xfsip)