Re: Iptables find invalid packets

[Dimitri GOURDON <dgourdon@xxxxxxxxx>]

Bernhard Bock a écrit :
> Dimitri GOURDON wrote:
> > There are 2 parameters that can perhaps help me :
> >
> > cat /proc/sys/net/ipv4/netfilter/ip_conntrack_max
> > 65520
> > cat /proc/sys/net/ipv4/netfilter/ip_conntrack_buckets
> > 8190
> >
> > I can modify the first on the fly (the problem is the same : no change)
> > But not the second...
>
> Depending on your kernel version, you may have to set the value when 
> loading the module. Try to insert the following line in 
> /etc/modprobe.conf (or similar, depending on your linux distribution):
>
> options nf_conntrack hashsize=16384
>
> best regards
> Bernhard
Finally, I've successed to modify the 2 parameters. I have respectively 
modify them with 131072 and 16384. And the problem stay entire...

Thanks.

Have you other ideas ???
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html