Date: Mon, 16 Apr 2001 15:57:57 -0400 (EDT) From: Rob Simmons <rsimmons@wlcg.com> To: <freebsd-security@freebsd.org> Subject: ipfilter state tables Message-ID: <Pine.BSF.4.33.0104161551110.55162-100000@mail.wlcg.com>
next in thread | raw e-mail | index | archive | help
-----BEGIN PGP SIGNED MESSAGE----- Hash: RIPEMD160 The total number of states that ipfilter can keep is goverened by these two constants in src/sys/netinet/ip_state.h and /usr/src/contrib/ipfilter/ip_state.h: IPSTATE_SIZE IPSTATE_MAX They are set to 5737, and 4013 which is ok for average use, but causes problems for higher traffic firewalls. Could these two have a kernel config file knob? This would make life easier :) Robert Simmons Systems Administrator http://www.wlcg.com/ -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.4 (FreeBSD) Comment: For info see http://www.gnupg.org iD8DBQE6207Jv8Bofna59hYRA+7JAJ0dO+b+YmGlyJ9Gk2VgcTvi/R2ljgCfa6re wg6WWa/swdM1JTCSC2XZyIw= =idMY -----END PGP SIGNATURE----- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.33.0104161551110.55162-100000>