On Fri, Feb 11, 2005 at 04:22:17PM +0100, Piotrek Kaczmarek wrote:
> # sysctl net.ipv4.netfilter.ip_conntrack_max
> net.ipv4.netfilter.ip_conntrack_max = 30000
i assume you set that manually, as i don't think there's an amount
of physical RAM that would result in 30000 on the dot... speaking of
which--how much physical RAM does this machine have? you would need 512
MB RAM for ip_conntrack_max to be automatically calculated to 32768,
even though the conntrack table would only really use around 12 MB of
kernel memory. also--is this machine dedicated solely to firewalling,
or is there something else chewing up your RAM?
-j
--
"I have thought this through. First, I will send Bart the money to
fly home. Then I will murder him."
--The Simpsons
