On Tue, Jul 11, 2000 at 05:44:10PM +0200, Andrius Adomaitis wrote: > Hello, > > recently I have installed linux 2.4.0-test2-ac2 kernel on high load web > server. Everything is ok, exept _very_ slow (if any) connect from my > office masq/firewall box to that server. Kernel logs shows following debug > printk's: > > kernel: TW_REC: reject openreq 181191355/1822953 193.219.xxx.xxx/62226 > Problem comes from ~linux/net/ipv4/tcp_ipv4.c line 1387 in function > tcp_v4_conn_request(...). I reviewed this list old archives, but found > only questions to this problem, so what are the answers? How to fix that? echo 0 > /proc/sys/net/ipv4/tcp_tw_recycle The problem is that masquerading effectively causes multiple timestamp clocks on a single host (its own + the one of all the boxes behind it), and the tw_recycle code cannot deal with that. -Andi - : send the line "unsubscribe linux-net" in the body of a message to majordomo@vger.rutgers.edu
