Книга: Linux Network Administrator Guide, Second Edition
Setting Timing Parameters for IP Masquerade
Setting Timing Parameters for IP Masquerade
When each new connection is established, the IP masquerade software creates an association in memory between each of the hosts involved in the connection. You can view these associations at any time by looking at the /proc/net/ip_masquerade file. These associations will timeout after a period of inactivity, though.
You can set the timeout values using the ipfwadm command. The general syntax for this is:
ipfwadm -M -s ‹tcp› ‹tcpfin› ‹udp›
and for the ipchains command it is:
ipchains -M -S ‹tcp› ‹tcpfin› ‹udp›
The iptables implementation uses much longer default timers and does not allow you to set them.
Each of these values represents a timer used by the IP masquerade software and are in units of seconds. The following table summarizes the timers and their meanings:
Name | Description |
---|---|
tcp | TCP session timeout. How long a TCP connection may remain idle before the association for it is removed. |
tcpfin | TCP timeout after FIN. How long an association will remain after a TCP connection has been disconnected. |
udp | UDP session timeout. How long a UDP connection may remain idle before the association for it is removed. |
- Forced writes - палка о двух концах
- Forced Writes
- Chapter 15. Graphical User Interfaces for Iptables
- What NAT is used for and basic terms and expressions
- Information request
- SCTP Generic header format
- MASQUERADE target
- System tools used for debugging
- Setting up default policies
- Setting up user specified chains in the filter table
- FORWARD chain
- How to use this License for your documents