hi, > /sbin/modprobe ip_conntrack hashsize=32767. >/proc/sys/net/ipv4/netfilter/ip_conntrack_buckets the value is 32767. If I run service iptables try putting the following line into /etc/sysctl.conf net.ipv4.netfilter.ip_conntrack_buckets = 32767 and try adding the following cmd to iptables script in /etc/rc.d/init.d /sbin/sysctl -p hope this would update the values. regards, kiran