<html><head></head><body><div style="font-family:Helvetica Neue, Helvetica, Arial, sans-serif;font-size:16px;"><div>Hi Rajesh, </div><div id="ydpb40c20ecyahoo_quoted_6630957547" class="ydpb40c20ecyahoo_quoted">
<div style="font-family:'Helvetica Neue', Helvetica, Arial, sans-serif;font-size:13px;color:#26282a;">
<div>
On Monday, 7 May 2018, 9:26:07 PM GMT+5:30, Govindaraj, Rajesh <Rajesh.Govindaraj@ipc.com> wrote:
</div>
<div><div id="ydpb40c20ecyiv4249080996"><div>
<div class="ydpb40c20ecyiv4249080996WordSection1"><br><div class="ydpb40c20ecyiv4249080996MsoNormal"><span style="font-size:11.0pt;">So you suggest the notrack rules to be added in the firewall, correct?<br></span><div><span style="font-size:11.0pt;">Yup</span></div><div><br><span style="font-size:11.0pt;"> </span>
</div></div><p class="ydpb40c20ecyiv4249080996MsoNormal"><span style="font-size:11.0pt;">Any thoughts on the security or other issues due to adding notrack rule <span></span></span></p><div><br><div>In real world scenarios where we dealt with huge
amount of traffic on such applications we have that rules in our
firewalls to keep our systems running. For us we use this for both sip
and dns traffic which is pointless to be track via conntrack in a ISP
environment. I don't aware of any security drawback with this, I may be
wrong but linux kernel has it own limits for dealing with these. May be
you can up the limit ? which I'm not sure of, but yes, we have
production servers running with these rules in order to keep them
working.<br><div><br>One other possible way may be distribute load among many servers.<br></div></div></div>
<div><br></div><div><br></div><p></p><span style="font-size:10.0pt;color:#26282A;"></span><span style="color:#26282A;"></span><div class="ydpb40c20ecyiv4249080996yqt8049001693" id="ydpb40c20ecyiv4249080996yqt97061"><div><div id="ydpb40c20ecyiv4249080996yahoo_quoted_6682826699"><div><div><div id="ydpb40c20ecyiv4249080996"><div><div><div id="ydpb40c20ecyiv4249080996yqt10478"><div><div id="ydpb40c20ecyiv4249080996yahoo_quoted_5882874669"><div><div><div id="ydpb40c20ecyiv4249080996"><div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div></div>
</div>
</div></div></div>
</div>
</div></div></body></html>