iptables module config
 

Hi All:

Here is my module display (by lsmod):
Module Size Used by Not tainted
ipt_MASQUERADE 1216 1 (autoclean)
iptable_filter 1728 1 (autoclean)
ip_conntrack_ftp 3200 0 (unused)
ip_nat_ftp 2944 0 (unused)
iptable_nat 12660 2 [ipt_MASQUERADE ip_nat_ftp]
ip_tables 10432 5 [ipt_MASQUERADE iptable_filter iptable_nat]
ip_conntrack 12684 2 [ipt_MASQUERADE ip_conntrack_ftp ip_nat_ftp iptable_nat]


The "Size" of the module ip_conntrack is not enough in my system.

However can I enlarge it? Do I need to recompile the kernel or just modify the /etc/modules?

Thanks.

Hi,

if you meen increasing the max number of connexions, that's in /proc/sys/net/ipv4/ip_conntrack_max.

Hi:

So, how to configure it? Or any suggested readings?

Thanks.

Hi,

just put the max value you want in this file. (echo 32760 > /proc/sys/net/ipv4/ip_conntrack_max)

see http://kalamazoolinux.org/presentati...conntrack.html &
http://ipsysctl-tutorial.frozentux.net/