On 5/4/07, Pat Riehecky <prieheck@xxxxxxx> wrote:
Indeed, after a bit of poking about it seems that you hit the nail on the head.... now I am trying to figure out how to alter the expiration times in iptables.... but that is a topic for another list if my google time proves fruitless.
I suggest the other way around. If the TCP sessions are inactive for such a long time that iptables session expiry kicks in, then keepalives are WAY too long. -- /kinkie
