From owner-freebsd-security Thu Jun 21 0:35:30 2001 Delivered-To: freebsd-security@freebsd.org Received: from falcon.ripn.net (falcon.ripn.net [194.190.145.10]) by hub.freebsd.org (Postfix) with ESMTP id E5F2037B403 for ; Thu, 21 Jun 2001 00:35:26 -0700 (PDT) (envelope-from abc@falcon.ripn.net) Received: (from abc@localhost) by falcon.ripn.net (8.11.3/8.11.3) id f5LBcHK69568; Thu, 21 Jun 2001 11:38:17 GMT (envelope-from abc) Content-Type: text/plain; charset="koi8-r" From: "Andrey V. Sokolov" Reply-To: abc@falcon.ripn.net Organization: RosNIIROS To: "Gino Thomas" , Subject: Re: Increase Time_Wait for IPF? Date: Thu, 21 Jun 2001 11:38:00 +0000 X-Mailer: KMail [version 1.2] References: <004201c0fa22$e5b880c0$ae02a8c0@d01pc174> In-Reply-To: <004201c0fa22$e5b880c0$ae02a8c0@d01pc174> MIME-Version: 1.0 Message-Id: <01062111380001.69450@falcon.ripn.net> Content-Transfer-Encoding: 8bit Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org On Thursday 21 June 2001 07:22, Gino Thomas wrote: Hi! Try sysctl net.inet.ipf.fr_tcpclosewait and set new value by sysctl -w > greetings, > > i?ve heard that it is possible do increase the Time_Wait delay for "keep > state", is someone aware how? Since i use the keep state keyword ipf drops > many packets that run in a timeout, so i wanted to raise the value a bit, > if possible. > > regards > gt -- Andrey V. Sokolov Russian Institute E-mail: abc@falcon.ripn.net for Phone: +7 095 333 4112 Public Networks To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message