How long does the firewall remain stateful?

[marnold]

This question ties in with my other thread, but is really a separate issue.

How long does the firewall remain stateful? For example, if my phone requests connection to a certain IP on a certain port, how long will iptables "remember" that before it considers the connection no longer needed and the port will be blocked? That would help me track down my problem in the above mentioned thread. I've been digging through iptables documentation but I haven't found anything definitive.

FWIW, I'm using an RT-N66U with Merlin's latest firmware.

 

[RMerlin]

This question ties in with my other thread, but is really a separate issue.

How long does the firewall remain stateful? For example, if my phone requests connection to a certain IP on a certain port, how long will iptables "remember" that before it considers the connection no longer needed and the port will be blocked? That would help me track down my problem in the above mentioned thread. I've been digging through iptables documentation but I haven't found anything definitive.

FWIW, I'm using an RT-N66U with Merlin's latest firmware.

The default conntrack values are configurable under Tools -> Other Settings. That will also show you the values used for the various timeouts.

 

[marnold]

Interesting. I guess I didn't realize that that's what those settings were for. In my specific case, the calls from Republic Wireless come in on UDP port 5090. According to their techs, the wifi calling is only registers once an hour. The UDP Timeout: Assured is set by default to three minutes. Would it be wise/sane to set it for something over an hour?

 

[RMerlin]

Interesting. I guess I didn't realize that that's what those settings were for. In my specific case, the calls from Republic Wireless come in on UDP port 5090. According to their techs, the wifi calling is only registers once an hour. The UDP Timeout: Assured is set by default to three minutes. Would it be wise/sane to set it for something over an hour?

I'd be worried about the impact of running a torrent client which would establish a lot of UDP connections.

Doesn't your device support some kind of keep-alive option?

 

[marnold]

I've contacted their tech support about that. Currently it doesn't. I usually don't use torrents unless there's a new Slackware release.

 

[RMerlin]

I've contacted their tech support about that. Currently it doesn't. I usually don't use torrents unless there's a new Slackware release.

Give it a try then. P2P applications such as Bittorrent are pretty much the only applications that can potentially open many UDP connections at once, so it should be safe if it does resolve your issue.

 

[marnold]

I bumped it up to 4200 (70 minutes) but unfortunately that didn't help. Still bounced off the firewall.