how to change ipnat timeouts. i have >2000 table size on one router and
most of entries are not active (and making my own ident program which use
ipnat -l SLOW)

i can't find anything in sysctl.