Is there any way to adjust the "keep state" Timeout in IPF???

Gerry
simmons@darykon.cet.com


On Tues, Nov. 27, 2001, Gerald C. Simmons wrote:
> 
> Has anyone run into this problem?
> 
> I have a DSL link with an assigned IP subnet block from my ISP. I'm using a
> NetBSD machine as a router/firewall using IPF. I have the following machines
> as clients, Windows 2000, Windows NT 4.0, Windows ME, and Linux.
> 
> I noticed recently, that when I use IE 5.5 on my Windows 2000 machine to go
> into ftp.netbsd.org via www.netbsd.org, something happens and the ftp packets
> back to my Windows 2000 machine get blocked.
> 
> Nov 27 08:37:13 dakkon ipmon[141]: 08:37:12.496046
>   ep1 @0:2 b ftp.netbsd.org,59891 -> derenai.darykon.cet.com,1162 PR tcp len
>   20 60 -S IN 
> 
> This actually hangs up IE 5.5 for about 3 minutes and it finally fails with a
> timeout error.
> 
> This doesn't happen with my Windows NT 4.0 box, or any of the others.
> 
> Gerry Simmons
> simmons@darykon.cet.com
> 
>