[FW1] Connection Table being Exhausted

[Paul Prokop <pprokop@mail.fairfax.com.au>]

    [ Part 1, Text/PLAIN (charset: ISO-8859-1 "Latin 1")  21 lines. ]
    [ Unable to print this part. ]

    [ The following text is in the "iso-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set. Some ]
    [ characters may be displayed incorrectly. ]

We are currently using a Firewall-1 V3.0b with Solaris 2.6
 
We are finding that our connections table is constantly reaching its
limit of 25000
Our TCP/IP time out is currently set to 1hour.
We have tried to raise the limit by editing the table.def file with:
 
connections = dynamic refresh expires TCP_START_TIMEOUT expcall
KFUNC_EXPIRE
implies tracked kbuf 1 hashsize 16384 limit 50000
 
but this has not allowed the connections to go above 25000
 
Any suggestions would be appreciated
 

Paul Prokop
Network and Communications
Email pprokop@mail.fairfax.com.au