On Fri, Feb 11, 2005 at 03:33:22PM +0000, Jason Opperisano wrote: > On Fri, Feb 11, 2005 at 04:22:17PM +0100, Piotrek Kaczmarek wrote: > > # sysctl net.ipv4.netfilter.ip_conntrack_max > > net.ipv4.netfilter.ip_conntrack_max = 30000 > > i assume you set that manually, as i don't think there's an amount > of physical RAM that would result in 30000 on the dot... speaking of > which--how much physical RAM does this machine have? you would need 512 > MB RAM for ip_conntrack_max to be automatically calculated to 32768, > even though the conntrack table would only really use around 12 MB of > kernel memory. also--is this machine dedicated solely to firewalling, > or is there something else chewing up your RAM? Yes, I set it by hand, I have 256mb of ram, currently there are ~17000 connections and 'free' shows 70mb of free memory. That machine is dedicated to routing/firewalling -- Piotr Kaczmarek
