Re: ip_conntrack table is full with razor requests. Something isn't timing out.

[Matthew Schumacher <matt.s@xxxxxxxxxxxxx>]

Michael Tautschnig wrote:
> Hello!
>
> > Since upgrading to 2.6.10 I have been having problems with my 
> > ip_conntrack table filling up.  It appears it is full of razor 
> > (http://razor.sf.net) requests from my internal mail server.
> So I'm not the only one with these problems - I can confirm this 
> completely. It's razor and kernel 2.6.10 here too.
>
> [...]
>
> It would be great, if somebody could help us - or tell us, what 
> information one should supply...
>
> Thanks in advance,
> Michael

Michael,

Thanks for your note on this... looks like a netfilter bug to me.  Did 
you have any problems running 2.6.9?  I am looking at the diffs and it 
looks like there are a number of changes to the ip_conntrack code in 
2.6.10.  When reading though the changelog for 2.6.11-rc5 it doesn't 
appear that any of these issues are resolved, so I may have to go back 
to 2.6.9 if it is known to work.

schu