Am Mi, den 06.07.2005 schrieb André Cruz um 17:08: > >> I have a router running FC 2 with kernel 2.6.10-1.770_FC2. > >That kernel has security issues. > > Ok. I will look into fedoralegacy because I'm running the latest kernel > from the mainstream updates. As far as I see FLP hasn't a newer kernel in the queue actually. http://www.netcore.fi/pekkas/buglist-fc2.html > >I don't understand why your proc value is that small. > >$ cat /proc/sys/net/ipv4/route/max_size > >131072 > > Maybe it's because my machine has only 256MB ram? I think these values > are computed according the RAM present. That might be the case. You can set a higher value in /etc/sysctl.conf. http://lantana.tenet.res.in/General_Info/Tech/HOWTO/Adv-Routing-HOWTO.html#LARTC.KERNEL.OBSCURE > >This is on my unmodified FC2 with the rebuild FC3 kernel 2.6.11-1.35. > >Do you constantly run P2P filesharing? That is a typical reason too for > >stopping SOHO hardware router to work as they have limited NAT > >capacities. > > No, I don't run p2p... What causes the most traffic is a lot of hosts > with NFS (udp) mounted shares which reside on the other side of the > firewall so there's a lot of traffic. Also I run shorewall 2.4.0... > Could it be slowing down the cleaning of the cache? I don't have experience with such a setup, but it sounds reasonable that a lot of NFS hosts causes your situation. Do those outside hosts hoave dynamic IPs? google search didn't bring me a good hint. Found a former thread http://forums.fedoraforum.org/archive/index.php/t-39765.html > André Alexander -- Alexander Dalloz | Enger, Germany | GPG http://pgp.mit.edu 0xB366A773 legal statement: http://www.uni-x.org/legal.html Fedora Core 2 GNU/Linux on Athlon with kernel 2.6.11-1.35_FC2smp Serendipity 17:22:40 up 11 days, 14 users, load average: 0.14, 0.12, 0.12
Attachment:
signature.asc
Description: Dies ist ein digital signierter Nachrichtenteil