[Firewall] Big list in block-file -> crash server

Arno van Amersfoort arnova at rocky.eld.leidenuniv.nl
Fri Apr 26 11:48:21 CEST 2013


I suspect changing nf_conntrack_max isn't going to help. Unless all 
those blocked hosts connect at the same time ofc ;-)

Are you sure the size of the blocked hosts list is causing this?

a.

On 4/25/2013 12:05, Michel van Dop wrote:
> Hi Arno,
>
> The machine gave no reaction (no sreen error), only what i can do is
> reset the vmware client.
>
> Afther the reset i can not find any errors in the /var/log/messages
> about the freezing.
>
>
> Now i try to block only Germany and United States (61000) (lines).
> And i try to change this: sysctl -w net.netfilter.nf_conntrack_max=65536
>
> More tips are welcome! :-)
>
> Michel
>
>
>
>
> Arno van Amersfoort schreef op 2013-04-25 11:27:
>
>> What do you mean *exactly* by "crash". Kernel OOM error, freezing, .... ?
>>
>> a.
>>
>> On 4/25/2013 9:43, Michel van Dop wrote:
>>> Hi, Since i have use 165176 host / subnets (lines) in my block list
>>> my new server CentOS 6.4 crash 2 times in 3 days. Any one idee what i
>>> need to change in my network setting? 1/2 blocklist? Best regards,
>>> Michel _______________________________________________ Firewall
>>> mailing list Firewall at rocky.eld.leidenuniv.nl
>>> <mailto:Firewall at rocky.eld.leidenuniv.nl>
>>> http://rocky.eld.leidenuniv.nl/mailman/listinfo/firewall Arno's
>>> (Linux IPTABLES Firewall) Homepage: http://rocky.eld.leidenuniv.nl
>
> --
>
>
>
>
>
> _______________________________________________
> Firewall mailing list
> Firewall at rocky.eld.leidenuniv.nl
> http://rocky.eld.leidenuniv.nl/mailman/listinfo/firewall
> Arno's (Linux IPTABLES Firewall) Homepage:
> http://rocky.eld.leidenuniv.nl
>

-- 
Arno van Amersfoort
E-mail    : arnova at rocky.eld.leidenuniv.nl
Donations are welcome through Paypal!
---------------------------------------------------------------------------
Arno's (Linux IPTABLES Firewall) Homepage:
http://rocky.eld.leidenuniv.nl


More information about the Firewall mailing list