search for: ip_conntrack_

<table cellspacing='0' cellpadding='0' border='0' ><tr><td style='font: inherit;'><br> Hi,<br><br> I'm dealing with a problem that the worker nodes that are behind a NAT aren't able to reach outside from time to time. (ie: on a given moment I can ping an address name and immediately after I cannot: "ping:

I ran across an interesting article (http://www.heise-security.co.uk/articles/print/82481) (1) that I think any and all firewall administrators should take a few moments to read. I personally have known that using "-m state --state ESTABLISHED,RELATED" was not the most secure thing to use for returning traffic. Namely this will allow you to make a valid connection to a web server,

Hi Roel Just guessing: do you have conntrack enabled? If not, "modprobe nf_conntrack_netlink" (you can remove it and its dependencies later) What are the outputs of sysctl net.netfilter.nf_conntrack_count and sysctl net.netfilter.nf_conntrack_max when the problem shows up? cheers Ethy On Thu, 31 Mar 2016 12:17:12 +0000 "Dovid Bender" <dovid at telecurve.com>