I am seeing it take several minutes for TCP connections to be closed after data has stopped flowing. I saw the same behavior with UDP connections and was able to shorten the time by setting ip_conntrack_udp_timeout and ip_conntrack_udp_timeout_stream to 5. I have tried modifying the TCP variables in /proc/sys/net/ipv4/netfilter and nothing seems to lower the time for TCP connections to close. Any suggestions how to make TCP connections close faster?-- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html