Hi !

On Tue, 27 Nov 2001, Gerald C. Simmons wrote:
> Is there any way to adjust the "keep state" Timeout in IPF???

Funny, i searched for this yesterday also :) FreeBSD seems to have such things,
but after all, you just don't need them. If a connection is finished
completely, the state is also removed. If your connection is nor finished
cleanly, the state stands around for the next 120 hours. You can remove such
stale state information with ipfstat -FS. But when doing this, all state
information will be discarded, including the connections you really have open
yet.

I have this in my ip-down script to terminate broken connects when doing the
24h-offline-thing for my DSL.

...Michael

-- 
visit http://www.bsdfans.org/   Home network powered by: NetBSD OpenBSD FreeBSD
Solaris HP-UX IRIX AIX MUNIX Tru64 Ultrix VMS SINIX Dolphin_Unix OpenStep MacOS