Re: UDP port session time out
Lloyd Aloysius <[email protected]>
| Newsgroups | gmane.comp.security.firewalls.m0n0wall |
|---|---|
| Message-ID | <CAGvuWYan-Edt-+ULESovqZTp2XSUCeabc+jeg8CrB-KFZk7m4Q@mail.gmail.com> |
Hi Manuel: Thank you for the answer. This is what I am looking for . Thanks Lloyd * * On Fri, Nov 30, 2012 at 7:39 AM, Manuel Kasper <[email protected]> wrote: > On 30.11.2012, at 06:11, Lloyd Aloysius <[email protected]> wrote: > > > What is the default UDP port session time out ? I am using most recent > > version 1.34 > > Two minutes (or one minute if there hasn't been a reply from the other > side). > > > How can I alter the UDP port session time out? > > You should be able to do it by adding the following tags to the <system> > section of config.xml (order is important): > > <earlyshellcmd>/sbin/ipf -D</earlyshellcmd> > <earlyshellcmd>/sbin/sysctl net.inet.ipf.fr_udptimeout=600</earlyshellcmd> > <earlyshellcmd>/sbin/sysctl > net.inet.ipf.fr_udpacktimeout=600</earlyshellcmd> > <earlyshellcmd>/sbin/ipf -E</earlyshellcmd> > > Replace 600 by the desired value in seconds times two (i.e. 600 gives 5 > minutes due to the way ipfilter measures the time). > > See also <http://doc.m0n0.ch/handbook/faq-hiddenopts.html> > > - Manuel