[OpenAFS] Connection time out

[Tino Schwarze]

On Mon, Jul 01, 2002 at 03:33:33PM -0400, Derek Atkins wrote:
> > Yes, I am behind a NAT, and I have directed port 7001 directly to my
> > workstation. Is it possible to prevent the port mappings from time out?
> 
> Set the UDP timeouts to >10mins.  How you do this depends on your
> NAT box.

Just for general information (before someone else starts searching) - on
Linux 2.4.x (with netfilter code), there seems to be no way to alter
masquerading timeouts. Neither using the ipchains nor the iptables
command. The appropiate procedures are simply not implemented (as of
kernel 2.4.17).

To increase the UDP timeout, edit
/usr/src/linux/net/ipv4/netfilter/ip_conntrack_proto_udp.c
and change the "#define UDP_STREAM_TIMEOUT" at the beginning of that file.

I've been using such a modified kernel for quite a while now.

HTH! Tino.

-- 
             * LINUX - Where do you want to be tomorrow? *
                  http://www.tu-chemnitz.de/linux/tag/