How should keep TCP session (ip>firewall>connection) for best practice? Last than one day or 8hr or something.
As per this: http://forum.mikrotik.com/t/how-to-edge-router-and-bng-optimization-for-isps/150007/1
24 hours for TCP established, but the other parameters matters too, check the article.
But the default timeout of an established TCP connection is already 1 Day…
https://wiki.mikrotik.com/wiki/Manual:IP/Firewall/Connection_tracking
That’s as good as it can get without breaking standards and best practices.
Un-active sessions get purged by conn_track regardless.
If you explain your needs is better…
For my standard users with CPE: 1 day (and with lease time on DHCP server 7 days)
For hotspot users I set the limit to 1 hour (and with lease time on DHCP server 1 hour)
thanks for all of your answers.