Quoting Jeffrey Altman <jaltman@secure-endpoints.com>: > 10 to 15 minutes is more than sufficient. Since ip_conntrack_udp_timeout and ip_conntrack_udp_timeout_stream were decreased from 28800 to 900 seconds, I've been seeing lots of dropped packets again. Any explanations? I've now increased both values to 3600. Cheers, Jaap