On 03/13/2012 09:06 AM, Tuomo Soini wrote:
> On Tue, 13 Mar 2012 07:27:14 -0700
> Tom Eastep <teas...@shorewall.net> wrote:
> 
>>>>   did you mean, that should it work generally or should I use
>>>> something like this: # echo "sysctl -w
>>>> net.nf_conntrack_max=131072" >> /etc/shorewall/start?
>>>
>>> Using /etc/sysctl.conf should work for shorewall too.
>>>
>>
>> But I have confirmed that it doesn't.
>>
>> Adding this to /etc/shorewall/init seems to do the job:
>>
>>      /sbin/sysctl -e -p /etc/sysctl.conf
> 
> I also verified that this _does_ work:
> 
> net.netfilter.nf_conntrack_max = 32768
> 
> but my system does run shorewall-init. I guess running it for shorewall
> does change things.

I suspect that you use /etc/init.d/network rather than NetworkManager?

-Tom
-- 
Tom Eastep        \ When I die, I want to go like my Grandfather who
Shoreline,         \ died peacefully in his sleep. Not screaming like
Washington, USA     \ all of the passengers in his car
http://shorewall.net \________________________________________________

Attachment: signature.asc
Description: OpenPGP digital signature

------------------------------------------------------------------------------
Keep Your Developer Skills Current with LearnDevNow!
The most comprehensive online learning library for Microsoft developers
is just $99.99! Visual Studio, SharePoint, SQL - plus HTML5, CSS3, MVC3,
Metro Style Apps, more. Free future releases when you subscribe now!
http://p.sf.net/sfu/learndevnow-d2d
_______________________________________________
Shorewall-users mailing list
Shorewall-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to