ip_conntrack_generic_timeout: No such file or directory

[luckyknight]

Hi,

I've followed a few guides on the internet to increase the limits for tcp/ip filtering such as those below:

/etc/sysctl.conf
net.netfilter.nf_conntrack_max=131072
net.ipv4.netfilter.ip_conntrack_generic_timeout=12 0
net.ipv4.netfilter.ip_conntrack_tcp_timeout_establ ished=54000

These settings no long seem to be applying? Have they changed in newer kernels?

sysctl: cannot stat /proc/sys/net/ipv4/netfilter/ip_conntrack_generic_timeout: No such file or directory
sysctl: cannot stat /proc/sys/net/ipv4/netfilter/ip_conntrack_tcp_timeout_established: No such file or directory

Thanks

[Doug S]

The issue is that the files are not present until after the conntrack module is loaded, which is typically sometime after the sysctl stuff runs. In my case the conntrack module is loaded when my iptables rule set loads, so I make the changes at the end of my iptables script. See also.