SYSTEM WARNING: 'date_default_timezone_get(): It is not safe to rely on the system's timezone settings. You are *required* to use the date.timezone setting or the date_default_timezone_set() function. In case you used any of those methods and you are still getting this warning, you most likely misspelled the timezone identifier. We selected the timezone 'UTC' for now, but please set date.timezone to select your timezone.' in '/usr/share/mantis/www/core.php' line 264

0001764: make timeouts for tcp-connections configurable - MantisBT
MantisBT - Endian Firewall
View Issue Details
0001764Endian FirewallNetwork related (VPN, uplinks)public2009-04-13 11:272010-09-21 10:53
mike-f 
peter-endian 
normalfeaturealways
acknowledgedopen 
2.2-rc3 
2.5 
0001764: make timeouts for tcp-connections configurable
/proc/sys/net/ipv4/netfilter/ip_conntrack_tcp_timeout_established
has value of 432000 seconds (120 hours)

maybe we want to lower this timeout to 6 hours (21600)?

this will keep a smaller
/proc/net/ip_conntrack
and save resources

needs to be tested carefully on connections with high idle-times
No tags attached.
Issue History
2009-04-13 11:27mike-fNew Issue
2009-04-13 11:27mike-fAssigned To => peter-endian
2010-09-21 10:53peter-endianNote Added: 0004780
2010-09-21 10:53peter-endianSeveritytweak => feature
2010-09-21 10:53peter-endianTarget Version => 2.5
2010-09-21 10:53peter-endianSummarylower timeouts for established tcp-connections => make timeouts for tcp-connections configurable
2010-09-21 10:53peter-endianStatusnew => acknowledged

Notes
(0004780)
peter-endian   
2010-09-21 10:53   
those values are standard, as long as there's no problem we will leave them as they are.

to make those values configurable (not via gui) would perhaps make sense.