Bug#552142: Acknowledgement (linux-image-2.6.26-2-686: machine hangs with nf_conntrack: table full, dropping packet - needs hard reboot)

[Toni Mueller <support@oeko.net>]

Hi,

I just wanted to add: Despite my having this:

$ grep track /etc/sysctl.conf
net.ipv4.netfilter.ip_conntrack_max = 485760


I found this after reboot:

$ cat /proc/sys/net/ipv4/netfilter/ip_conntrack_max
32768


I had to manually set the value:

# sysctl -w net.ipv4.netfilter.ip_conntrack_max=485760
net.ipv4.netfilter.ip_conntrack_max = 485760


After that, the desired value is being displayed:

$ cat /proc/sys/net/ipv4/netfilter/ip_conntrack_max
485760


I'm a bit confused as to why the wrong value gets set at boot time, but
it doesn't really improve on the situation...

I've checked my other values from /etc/sysctl.conf, and they get set
correctly.

What gives?



Kind regards,
--Toni++