welterde/l2tpns
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

decrease ip_conntrack_tcp_timeout_established to 5hrs

Browse source
This commit is contained in:
Brendan O'Dea 2006-02-23 01:07:23 +00:00
parent 93e40637fa
commit b4ca67c68b
3 changed files with 6 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

3
Changes
View file

@ -1,4 +1,4 @@
* Sat Feb 18 2006 Brendan O'Dea <bod@optus.net> 2.1.16 * Thu Feb 23 2006 Brendan O'Dea <bod@optus.net> 2.1.16
- Send configured magic-no in LCP EchoReq when LCP is opened. - Send configured magic-no in LCP EchoReq when LCP is opened.
- Correct addition of single IP to pool (Jonathan Yarden). - Correct addition of single IP to pool (Jonathan Yarden).
- Ensure session changes from LCP ConfigReq/ConfigNak are sent to cluster. - Ensure session changes from LCP ConfigReq/ConfigNak are sent to cluster.
@ -6,6 +6,7 @@
- Avoid endless loop in processipcp, processipv6cp. - Avoid endless loop in processipcp, processipv6cp.
- Additional length checks in processlcp. - Additional length checks in processlcp.
- Allow peer to request a new magic-number, or to disable magic-numbers. - Allow peer to request a new magic-number, or to disable magic-numbers.
- Decrease ip_conntrack_tcp_timeout_established to 5hrs (table filling).
* Mon Dec 19 2005 Brendan O'Dea <bod@optus.net> 2.1.15 * Mon Dec 19 2005 Brendan O'Dea <bod@optus.net> 2.1.15
- Drop backtrace. - Drop backtrace.

5
garden.c
View file

@ -9,7 +9,7 @@
/* walled garden */ /* walled garden */
char const *cvs_id = "$Id: garden.c,v 1.24 2005-10-11 09:04:53 bodea Exp $"; char const *cvs_id = "$Id: garden.c,v 1.25 2006-02-23 01:07:23 bodea Exp $";
int plugin_api_version = PLUGIN_API_VERSION; int plugin_api_version = PLUGIN_API_VERSION;
static struct pluginfuncs *f = 0; static struct pluginfuncs *f = 0;
@ -23,7 +23,8 @@ char *up_commands[] = {
"iptables -t nat -N garden_users >/dev/null 2>&1", // Empty chain, users added/removed by garden_session "iptables -t nat -N garden_users >/dev/null 2>&1", // Empty chain, users added/removed by garden_session
"iptables -t nat -F garden_users", "iptables -t nat -F garden_users",
"iptables -t nat -A PREROUTING -j garden_users", // DNAT any users on the garden_users chain "iptables -t nat -A PREROUTING -j garden_users", // DNAT any users on the garden_users chain
"sysctl -w net.ipv4.ip_conntrack_max=512000 >/dev/null", // lots of entries "sysctl -w net.ipv4.netfilter.ip_conntrack_max=512000" // lots of entries
" net.ipv4.netfilter.ip_conntrack_tcp_timeout_established=18000 >/dev/null", // 5hrs
NULL, NULL,
}; };

2
l2tpns.spec
View file

@ -43,5 +43,5 @@ rm -rf %{buildroot}
%attr(644,root,root) /usr/share/man/man[58]/* %attr(644,root,root) /usr/share/man/man[58]/*
%changelog %changelog
* Sat Feb 18 2006 Brendan O'Dea <bod@optus.net> 2.1.16-1 * Thu Feb 23 2006 Brendan O'Dea <bod@optus.net> 2.1.16-1
- 2.1.16 release, see /usr/share/doc/l2tpns-2.1.16/Changes - 2.1.16 release, see /usr/share/doc/l2tpns-2.1.16/Changes