<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
</head>
<body bgcolor="#ffffff" text="#000000">
I was trying to do what the article at <a
href="http://www.austintek.com/LVS/LVS-HOWTO/HOWTO/LVS-HOWTO.performance.html#conntrack_filling_tables%3C/blockquote%3E%3C/div%3E"
target="_blank">http://www.austintek.com/LVS/LVS-HOWTO/HOWTO/LVS-HOWTO.performance.html#conntrack_filling_tables</a>
suggested<br>
My iptables rules are<br>
<hr size="2" width="100%">#that's what the mentioned article
suggested..I'm not sure it's working!<br>
*raw<br>
-A PREROUTING -p tcp -m tcp --dport 80 -j NOTRACK <br>
COMMIT<br>
*filter<br>
-A INPUT -i lo -j ACCEPT<br>
-A INPUT -p icmp --icmp-type any -j ACCEPT<br>
#no tracking needed for this<br>
-A INPUT -p tcp --dport 80 -j ACCEPT<br>
#that would be another question but I can't get rid of this while using
ssh tunneling <br>
-A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT<br>
#ssh port<br>
-A INPUT -p tcp --dport 12345 -j ACCEPT<br>
#my ip<br>
-A INPUT -s 123.123.123.123 -j ACCEPT<br>
-A INPUT -j DROP <br>
-A FORWARD -j DROP <br>
COMMIT<br>
<hr size="2" width="100%">I keep getting these messages on my kernel log<br>
<hr size="2" width="100%">Apr 13 20:00:41 server kernel: ip_conntrack:
table full, dropping packet.<br>
Apr 15 14:23:29 server kernel: ip_conntrack: table full, dropping
packet.<br>
Apr 15 20:19:04 server last message repeated 2 times<br>
Apr 16 13:53:58 server kernel: ip_conntrack: table full, dropping
packet.<br>
Apr 17 19:05:32 server last message repeated 3 times<br>
Apr 17 21:20:43 server kernel: ip_conntrack: table full, dropping
packet.<br>
<hr size="2" width="100%">is there a way to completely disable
ip_conntrack ?<br>
<br>
<br>
<br>
</body>
</html>