Kris Maglione wrote:
> Chad R. Larson wrote:
>>I found that I could blow out the m0n0wall state table if I were a super
>>node, especially when my Windoze box would crash leaving unclosed
>>connections. We used sysctl to lower the TCP timeout value from its
>>default ten days(!) to a couple of hours.
> I think that the timeout issue was also fixed in a 1.2 beta release.
> It's also possible to increase the size of the state table, though it
> slows things down if it gets that full.
Yeah, but that wasn't a tuneable in the FreeBSD 4.11 kernel. You had to
edit a header and recompile. Using a reasonable time out did it for us.
Chad R. Larson (CRL22) chad at eldocomp dot com
Eldorado Computing, Inc. 602-604-3100
5353 North 16th Street, Suite 400
Phoenix, Arizona 85016-3228
-- CONFIDENTIALITY NOTICE --
intended for use only by the individual or entity to which it is addressed, and may contain
are not the intended recipient or it appears that this mail has been forwarded to you without proper
authority, you are notified that any use or dissemination of this information in any manner is
strictly prohibited. In such cases, please notify us immediately at mailmaster at mphasis dot com and
delete this mail from your records.