Tor and iptables

[Peter Palfrader]

On Fri, 15 Sep 2006, gabrix wrote:

> > Sep 15 09:43:58 argo kernel: ip_conntrack: table full, dropping packet.
> > Sep 15 09:43:58 argo kernel: ip_conntrack: table full, dropping packet.
> > Sep 15 09:43:58 argo kernel: ip_conntrack: table full, dropping packet.

.) cat /proc/sys/net/ipv4/netfilter/ip_conntrack_max
.) note number.  multiply by 2 or 4 or whatever seems like a good measure
.) echo $newnumber > /proc/sys/net/ipv4/netfilter/ip_conntrack_max

On my machines ip_conntrack_max is between 8 and 64k.  Something around
30k should be way enough.