Re: ipchains problem

[MaD dUCK <madduck@madduck.net>]

also sprach Andrew Perrin (on Wed, 07 Mar 2001 08:11:50PM -0500):
> The problem I'm running into is that my wife's e-mail (which uses
> IMAP) often gets "TCP/IP Connection Dropped" errors. I suspect that these
> happen when ipchains times out her port mapping. Can someone help with
> setting ipchains so it never, or at least only after a long time, resets a
> connection on outgoing port 143?

this is due to the (low) default masquerading timeout values of
ipchains. to change them, use

ipchains -MS tcp tcpfin udp

i have tcp=3600 tcpfin=5 udp=1800 and it works well.

btw: man ipchains would have shown you that...

martin

[greetings from the heart of the sun]# echo madduck@ !#:1:s@\@@@.net
-- 
yesterday it worked.
today it is not working.
windows is like that.