/* HINT: Search archives @ http://www.indyramp.com/masq/ before posting!
/* ALSO: Don't quote this header. It makes you look lame :-) */
>Thanks David, I've always been curious as to the power of the values
>of things like 'tcp_keepalive_time' etc, or am I missing the location
>of their descriptions ? I'd like to know if I've been in error keeping
>the following line at the end of my 'rc.local' on _all_ the machines
>on my lan, including the main (Linux) masq box. Thanks.
>
>
>echo 60 > /proc/sys/net/ipv4/tcp_keepalive_time
Many parts of the network stack timeouts (MASQ related) are
controlled by the example rc.firewall shown in the HOWTO:
#--------------------------------------------------------------------#
Masquerading
Timeouts#--------------------------------------------------------------------#
Set timeout values for masq sessions (seconds). ## Item #1 - 2 hrs timeout for
TCP session timeouts# Item #2 - 10 sec timeout for traffic after the TCP/IP
"FIN" packet is received# Item #3 - 60 sec timeout for UDP traffic ## Note to
ICQ users: You might want to set the UDP timeout to something#
like 160.#echo " - Changing IP masquerading timeouts."/sbin/ipchains -M -S
7200 10 60
Now, please keep in mind that these settings are for MASQed connections.
If you wanted to set these for the Linux's IP stack, you would do that through
the ioctl options in proc.
Btw.. -DID- find a small description of some /proc options in
/usr/src/linux/Documentation/sysctl and in
/usr/src/linux/Documentation/networking/ip-sysctl.txt
but it is quite out of date.
--David
.----------------------------------------------------------------------------.
| David A. Ranch - Linux/Networking/PC hardware [EMAIL PROTECTED] |
!---- ----!
`----- For more detailed info, see http://www.ecst.csuchico.edu/~dranch -----'
_______________________________________________
Masq maillist - [EMAIL PROTECTED]
Admin requests can be handled at http://www.indyramp.com/masq-list/ --
THIS INCLUDES UNSUBSCRIBING!
or email to [EMAIL PROTECTED]
PLEASE read the HOWTO and search the archives before posting.
You can start your search at http://www.indyramp.com/masq/
Please keep general linux/unix/pc/internet questions off the list.
