 NFQUEUQ LIMIT [message #147647] |
Thu, 27 February 2020 12:15  |
eshkhmed
Messages: 4
Registered: December 2018
|
|
|
|
To avoid dropping packets by kernel on high load (debug messages like nf_queue: full at 1024 entries, dropping packets(s)) please increase parameter NFQNL_QMAX_DEFAULT from 1024 to 8192!!
This parameter defined in file net/netfilter/nfnetlink_queue_core.c of linux kernel source, that using kerio control.
|
|
|
|
| Re: NFQUEUQ LIMIT [message #148389 is a reply to message #147647] |
Sat, 04 July 2020 00:30  |
CristianoIera
Messages: 5
Registered: February 2014
|
|
|
|
Nice idea.
The kerio control engine is too sensible to DDOS attacks, it doesn't detect and close correctly the half-open connections in a DDOS attack. It's really easy to make it unresponsive also with a badwidth of 200Mbits only (xeon, 8GB, 6 core).
|
|
|
|
Members
Search
Help
Register
Login
Home
