View Single Post
  #1 (permalink)  
Old 2007-09-13
switzer switzer is offline
Junior Member
 
Join Date: 2006-12-21
Posts: 28
Rep Power: 0
switzer has an average reputation (10+)
Default Capacity Optimization

We currently have a problem with our firewall having to be reset every few hours - while awaiting an engineer we have looked at the logs and have increased capacity optimization to 50000 from 25000 this seems to help as
it lasted about 5 hours instead of 2.
1 Are there any issues we should be aware of when we try this ?
2. Cant see anything else we can do -
We are looking at recently installed rules etc .....
This is what we saw on the logs -
FW-1: WARNING: The connections table is 80% full.
Sep 6 13:03:42 CRUK-1 [LOG_CRIT] kernel: New connections will be dropped once the connection table reaches
Sep 6 13:03:42 CRUK-1 [LOG_CRIT] kernel: full capacity. Please consider increasing the connections table limit.
Any other ideas to increase the time between fall overs while we get
a CP engineer in.
Reply With Quote