On Tue, Jun 05, 2001 at 09:00:48PM +0200, Snyder, Ryan wrote:
> I was wondering if any one can help me, I received this email address from
> Alan Cox.
> I am running CheckPoint Firewall under Linux 2.2.19. The Firewall is
> working fine,
> but on the interface that is connected to the Internet via a Cisco router
> has over 950
> entries in the arp cache. I understand this is normal, but since there is
> only one
> route to the Internet, is there a way to not have Linux to an arp cache
> lookup, or even
> a setting to make the cache size much bigger?
> I have looked into running arpd, but I am kinda fuzzy about running daemon
> stuff in
> userspace; espically on a firewall.
> Any help is greatly appreciated.
You can tune the ARP cache size using the appropiate sysctls. See
arp(7) for more information.
Life would be so much easier if we could just look at the source code.