I am having a session problem with my hardware firewall. I believe it is because I have 10 linux servers behind it. The hardware firewall has a 128k concurrent session maximum. I tried turning down the keepalive and these echo "net.ipv4.tcp_fin_timeout = 30" >> /etc/sysctl.conf echo "net.ipv4.tcp_keepalive_time = 1800" >> /etc/sysctl.conf echo "net.ipv4.tcp_window_scaling = 0" >> /etc/sysctl.conf echo "net.ipv4.tcp_sack = 0" >> /etc/sysctl.conf echo "net.ipv4.tcp_timestamps = 0" >> /etc/sysctl.conf Ip: 1095058 total packets received 0 forwarded 0 incoming packets discarded 939742 incoming packets delivered 1426602 requests sent out 2 reassemblies required 1 packets reassembled ok Icmp: 62 ICMP messages received 0 input ICMP message failed. ICMP input histogram: destination unreachable: 12 echo requests: 50 13675 ICMP messages sent 0 ICMP messages failed ICMP output histogram: destination unreachable: 13625 echo replies: 50 Tcp: 103522 active connections openings 282 passive connection openings 0 failed connection attempts 528 connection resets received 61 connections established 1021085 segments received 1348536 segments send out 103958 segments retransmited 106 bad segments received. 163522 resets sent Udp: 59967 packets received 13614 packets to unknown port received. 0 packet receive errors 75176 packets sent TcpExt: ArpFilter: 0 6192 TCP sockets finished time wait in fast timer 50385 delayed acks sent 4 delayed acks further delayed because of locked socket Quick ack mode was activated 7418 times 5 packets directly queued to recvmsg prequeue. 2921 packets directly received from prequeue 266564 packets header predicted TCPPureAcks: 202419 TCPHPAcks: 286305 TCPRenoRecovery: 18 TCPSackRecovery: 0 TCPSACKReneging: 0 TCPFACKReorder: 0 TCPSACKReorder: 0 TCPRenoReorder: 0 TCPTSReorder: 0 TCPFullUndo: 0 TCPPartialUndo: 0 TCPDSACKUndo: 0 TCPLossUndo: 11917 TCPLoss: 0 TCPLostRetransmit: 0 TCPRenoFailures: 3138 TCPSackFailures: 0 TCPLossFailures: 4706 TCPFastRetrans: 18 TCPForwardRetrans: 0 TCPSlowStartRetrans: 5239 TCPTimeouts: 50596 TCPRenoRecoveryFail: 4 TCPSackRecoveryFail: 0 TCPSchedulerFailed: 0 TCPRcvCollapsed: 0 TCPDSACKOldSent: 0 TCPDSACKOfoSent: 0 TCPDSACKRecv: 0 TCPDSACKOfoRecv: 0 TCPAbortOnSyn: 0 TCPAbortOnData: 20780 TCPAbortOnClose: 367 TCPAbortOnMemory: 0 TCPAbortOnTimeout: 4666 TCPAbortOnLinger: 0 TCPAbortFailed: 0 TCPMemoryPressures: 0 Regards, Mike __________________________________ Do you Yahoo!? Friends. Fun. Try the all-new Yahoo! Messenger. http://messenger.yahoo.com/ - : send the line "unsubscribe linux-net" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html