On 5/4/07, Pat Riehecky <[EMAIL PROTECTED]> wrote:
Indeed, after a bit of poking about it seems that you hit the nail on
the head.... now I am trying to figure out how to alter the expiration
times in iptables.... but that is a topic for another list if my google
time proves fruitless.

I suggest the other way around. If the TCP sessions are inactive for
such a long time that iptables session expiry kicks in, then
keepalives are WAY too long.

--
   /kinkie

Reply via email to