/proc/net/ip_conntrack

[M.W. Chang]

> Review what constitutes an IP connection in its entirety (hint, it's
> more than just an IP/Port pair).  Some applications (like bittorrent)
> Also look at the conntrack timeouts for entries to be removed from the
> conntrack table even on terminated connections.

Does iptables have a feature to limit the number of ip_conntrack entries
used by an interface (lo, eth0, eth1)?


-- 
  .~.    http://toylet.homeip.net
 / v \   Linux 2.4.27
/( _ )\  8:18am up 8:00 1 user
  ^ ^    1.72 1.71