ipchains masquerade

Howard Lowndes lannet at lannet.com.au
Sun Oct 14 07:50:02 EST 2001


That is not a good reason.  You might not want a stale TCP connection
hanging around for 5 days like a bad smell.

On Sun, 14 Oct 2001, Patrick Cole wrote:

> Fri, Oct 12, 2001 at 08:05:12AM +1000, bert wrote:
>
> > Hi,
> > As I understand it(which is probably not how it is) the timeouts in the 2.4
> > kernel are hard coded.  That is they are in the source for ???? network
> > module.  Ipchains was designed for the 2.2 kernels, where you could change
> > this stuff.  You can always edit the source if you REALLY need to change the
> > time outs.  I heard some where that they aren't really important with 2.4 or
> > that may have been with iptables.
>
> The reason they aren't important as such is because they're set so high by default.
>
>

-- 
Howard.
LANNet Computing Associates - Your Linux people
Contact detail at http://www.lannetlinux.com





More information about the linux mailing list