I use CentOS 5.10 and: # uname -a Linux en-prisetel 2.6.18-348.1.1.el5 #1 SMP Tue Jan 22 16:19:19 EST 2013 x86_64 x86_64 x86_64 GNU/Linux
As for the other question: # cat /proc/sys/net/netfilter/ip_conntrack_count cat: /proc/sys/net/netfilter/ip_conntrack_count: No such file or directory on the other side: # cat /proc/sys/net/ipv4/netfilter/ip_conntrack_count 32 Costa -----Original Message----- From: Tom Eastep [mailto:[email protected]] Sent: 12 August 2014 22:52 To: [email protected] Subject: Re: [Shorewall-users] IP_CONNTRACK vs NF_CONNTRACK On 8/12/2014 8:01 AM, Costantino wrote: > While getting the Shorewall dump for previous issue I got some errors > > # shorewall dump > dump.txt > > cat: /proc/sys/net/netfilter/nf_conntrack_count: No such file or > directory > > cat: /proc/sys/net/netfilter/nf_conntrack_max: No such file or > directory > > Blogs on the internet explain that it's because I'm using the older > IP_CONNTRACK modules instead of the newer NF_CONNTRACK. > > So, is there any plus in replacing the older with the newer and what's > the impact on what's already installed should I choose to do it? > Which kernel version are you running and on which distribution? And does the file /proc/sys/net/netfilter/ip_conntrack_count exist? Thanks, -Tom -- Tom Eastep \ When I die, I want to go like my Grandfather who Shoreline, \ died peacefully in his sleep. Not screaming like Washington, USA \ all of the passengers in his car http://shorewall.net \________________________________________________ ------------------------------------------------------------------------------ _______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
