Re: Q: Duration of masqueraded connection

Fuzzy Fox (fox@foxtaur.com)
Mon, 1 Nov 1999 11:29:23 -0600


Levent Gündogdu <levon@feature-it.de> wrote:
>
> I'd like to figure out how to change the masquerading behavior for
> connections that are idle for a period of time.

Check ipchains(8), and examine the "-S" option.

ipchains -M -S <tcp-act> <tcp-fin> <udp-act>

Timeouts are in seconds. The defaults are 900, 120, and 300 seconds.
So if you're idle more than 15 minutes, the connection is quietly
dropped. I changed my TCP-active timeout to four hours.

Be aware that IP-Masq has its own mailing list, see

http://www.indyramp.com/masq-list/

-- 
   fox@dallas.net (Fuzzy Fox)      || "Good judgment comes from experience.
sometimes known as David DeSimone  ||  Experience comes from bad judgment."
  http://www.dallas.net/~fox/      ||                 -- Life Lessons

- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.rutgers.edu Please read the FAQ at http://www.tux.org/lkml/