On 2/22/11 8:39 AM, [email protected] wrote:

> thank you very much for that hint. It seems to solve our problem.
> Unfortunately I can't find much information on that parameter other than
> the fact that it tells netfilter to be more liberal with packages out of
> the current TCP window.
> 
> I will search for more information on the parameter but would be glad for
> any link to additional information - especially why setting this parameter
> becomes necessary for our configuration.

Hi Florian,

I have no quick reference to additional information beyond what a Google
search turns up. But experience has shown that where TCP stalls are
occurring, setting that parameter usually corrects the problem.

-Tom
-- 
Tom Eastep        \ When I die, I want to go like my Grandfather who
Shoreline,         \ died peacefully in his sleep. Not screaming like
Washington, USA     \ all of the passengers in his car
http://shorewall.net \________________________________________________

Attachment: signature.asc
Description: OpenPGP digital signature

------------------------------------------------------------------------------
Free Software Download: Index, Search & Analyze Logs and other IT data in 
Real-Time with Splunk. Collect, index and harness all the fast moving IT data 
generated by your applications, servers and devices whether physical, virtual
or in the cloud. Deliver compliance at lower cost and gain new business 
insights. http://p.sf.net/sfu/splunk-dev2dev 
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to