Re: [CentOS] ip_conntrack: table full, dropping packet.

2008-04-18 Thread Stephen John Smoogen
On Fri, Apr 18, 2008 at 10:23 AM, Masry Alex <[EMAIL PROTECTED]> wrote: > > I was trying to do what the article at > http://www.austintek.com/LVS/LVS-HOWTO/HOWTO/LVS-HOWTO.performance.html#conntrack_filling_tables > suggested > My iptables rules are > > #that's w

Re: [CentOS] ip_conntrack: table full, dropping packet.

2008-04-18 Thread Robert Spangler
On Friday 18 April 2008 12:23, Masry Alex wrote: > #that's what the mentioned article suggested..I'm not sure it's working! > *raw > -A PREROUTING -p tcp -m tcp --dport 80 -j NOTRACK Do you have a chain called NOTRACK? What is setup under it? > COMMIT > *filter > -A INPUT -i lo -j ACCEPT

Re: [CentOS] ip_conntrack: table full, dropping packet.

2008-04-18 Thread Florin Andrei
John R Pierce wrote: Masry Alex wrote: is there a way to completely disable ip_conntrack ? without connection tracking, NAT simply won't work. With recent kernels, it is possible to do 1:1 NAT (mapping one private address to exactly one public IP alias on the external interface) without ne

Re: [CentOS] ip_conntrack: table full, dropping packet.

2008-04-18 Thread John R Pierce
Masry Alex wrote: is there a way to completely disable ip_conntrack ? without connection tracking, NAT simply won't work. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos

[CentOS] ip_conntrack: table full, dropping packet.

2008-04-18 Thread Masry Alex
I was trying to do what the article at http://www.austintek.com/LVS/LVS-HOWTO/HOWTO/LVS-HOWTO.performance.html#conntrack_filling_tables suggested My iptables rules are -