Re: Problem w/IP_MASQ & ssh/telnet?

Joe Kellner (jkellner@tampabay.rr.com)
Fri, 21 May 1999 14:40:20 -0400


The problem with this is you get 100's of sockets open very fast if you
don't have a relatively small timeout limit.

Dax Kelson wrote:
>
> Justin Mecham said once upon a time (Mon, 17 May 1999):
>
> > I'm having problems with what I believe is IP_MASQ and ssh/telnet... If I
> > open a telnet or ssh session to my server behind my ip_masq box, it
> > disconnects me after and some idle time. I haven't timed it so I'm not sure
> > if it is the same all the time. If I do tail -f /some/file and leave it it
> > won't connect me as long as data comes through, or if I'm in ncftp
> > downloading something or wget. I'm using 2.2.3 on my masq server.
>
> man ipchains
>
> -S, --set tcp tcpfin udp
> Change the timeout values used for masquerading. This
> command always takes 3 parameters, representing the
> timeout values (in seconds) for TCP sessions, TCP sessions
> after receiving a FIN packet, and UDP packets, respectively.
> A timeout value 0 means that the current timeout value of
> the corresponding entry is preserved. This option is only
> allowed in combination with the -M flag.
>
> Dax Kelson
>
> -
> To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
> the body of a message to majordomo@vger.rutgers.edu
> Please read the FAQ at http://www.tux.org/lkml/

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.tux.org/lkml/