# Modified conntrack settings rewritten

**URL:** <https://community.ipfire.org/t/modified-conntrack-settings-rewritten/13182>\
**Category:** Routing\
**Created:** [15 November 2024 10:22 UTC](https://community.ipfire.org/t/modified-conntrack-settings-rewritten/13182 "2024-11-15T10:22:53Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![ilmaars](https://community.ipfire.org/user_avatar/community.ipfire.org/ilmaars/32/9755_2.png) [@ilmaars](https://community.ipfire.org/u/ilmaars)\
**Post date:** [15 November 2024 10:22 UTC](https://community.ipfire.org/t/modified-conntrack-settings-rewritten/13182/1 "2024-11-15T10:22:53Z")

</div>

Hi!  
I have changed  
/proc/sys/net/netfilter/nf\_conntrack\_tcp\_timeout\_established from default 432000 to 7200  
But after some process restart or system reboot value is set back to default. How to make changes permanent?

---

<div class="post-metadata">

**Author:** ![ag](https://community.ipfire.org/user_avatar/community.ipfire.org/ag/32/12124_2.png) [@ag](https://community.ipfire.org/u/ag)\
**Post date:** [15 November 2024 13:43 UTC](https://community.ipfire.org/t/modified-conntrack-settings-rewritten/13182/2 "2024-11-15T13:43:59Z")

</div>

Hi ilmaars,

The value you’re modifying (`/proc/sys/net/netfilter/nf_conntrack_tcp_timeout_established`) gets reset after a reboot or certain service restarts because it’s a runtime configuration. To make it persist, you can use a system-wide script located at `/etc/sysconfig/rc.local`.

The `rc.local` script is executed at the end of the boot process and is ideal for custom settings like yours. You can simply add a command to it, such as:

```auto
# Reduce conntrack TCP established timeout to 2 hours
echo 7200 > /proc/sys/net/netfilter/nf_conntrack_tcp_timeout_established

```

For more details on how to use `rc.local` in IPFire, check the [IPFire documentation on rc.local](https://www.ipfire.org/docs/pkgs/rc-local). It includes instructions to ensure the file is properly configured.

This should help retain your settings across reboots.

Hope this helps.

Thanks,  
A G

---

<div class="post-metadata">

**Author:** ![ilmaars](https://community.ipfire.org/user_avatar/community.ipfire.org/ilmaars/32/9755_2.png) [@ilmaars](https://community.ipfire.org/u/ilmaars)\
**Post date:** [15 November 2024 13:45 UTC](https://community.ipfire.org/t/modified-conntrack-settings-rewritten/13182/3 "2024-11-15T13:45:53Z")

</div>

Thank you very much for the comprehensive information!