• Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login
Netgate Discussion Forum
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login

UDP TTL - Howto do it (for SIP for instance) ?

Scheduled Pinned Locked Moved Firewalling
1 Posts 1 Posters 1.1k Views
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • R
    Reiner030
    last edited by Oct 4, 2013, 3:35 PM Oct 4, 2013, 2:02 PM

    Hello,

    I found out, that 2.1 relase now have a text comment that TTL is only for TCP connections and also blocks UDP rules which try to set TTL…

    When searching this forum this topic is very rare requested/answered... some articles > 5 years old which can't be "actual" useable ...

    The only hint I found was

    http://forum.pfsense.org/index.php/topic,4364.msg27073.html#msg27073

    State timeout is for TCP only.
    You might visit system -> advanced and set the firewall optimization mode to conservative.

    But even this is perhaps wrong because the info text of these options writes:

    "Firewall Optimization Options:

    • normal (default)
            as the name says, it's the normal optimization algorithm
    • high-latency
            used for high latency links, such as satellite links.  Expires idle connections later than default
    • aggresive
            expires idle connections quicker. More efficient use of CPU and memory but can drop legitimate idle connections
    • conservative
            tries to avoid dropping any legitimate idle connections at the expense of increased memory usage and CPU utilization.

    EDIT (clicked on wrong button^^):

    But in my opinion the "conservative" option is less useful for shorter TTLs than the "normal" one ?

    1 Reply Last reply Reply Quote 0
    1 out of 1
    • First post
      1/1
      Last post
    Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.
      This community forum collects and processes your personal information.
      consent.not_received