Hi,

Just wondering if there is any way for me to auto clear the ip_conntrack file? I know increase the value in ip_conntrack_max will increase the connections but i would like the ip_conntrack records to be cleared consistently.

Thanks !

Have you tried just dropping the entire table by unloading the conntrack module? Or are you trying to do something more elegant like decreasing the timeout values so that the table clears faster on its own?

Hi Captain_Caveman,

Thanks for your reply. Actually previously i did post about my problem its about my iptables stop working over time and restarting iptables solve the problem. BUt its a hassle to do that restarting everytime, quite unreliable for clients.

Actually you did helped me in this thread: http://www.linuxquestions.org/questi...d.php?t=526276

Thanks for that, as suggested in that thread that maybe the ip_conntrack after flush manage to work the iptables service again. So i want to flush the ip_conntrack file in the crond job to see if that solves the problem...
I have no idea what is the problem yet. A few sites are experiencing the same problem.

Thanks!