Hi, I'm wondering what happens after ip_conntrack_max is reached? Reading the archive, I understand the UNREPLIED entries are removed in favor of new connection. But other than that, it seems that new connections will simply be dropped? If this is the case, then new clients might not be able to make a connection at all? thanks for your help Lihua