From nobody Fri Jul 18 09:53:05 2025 X-Original-To: dev-commits-src-all@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4bk4q53SH2z625dp; Fri, 18 Jul 2025 09:53:05 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R10" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4bk4q51cCgz46Bp; Fri, 18 Jul 2025 09:53:05 +0000 (UTC) (envelope-from git@FreeBSD.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1752832385; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=ijEXlgv7KJLUBa4HLRd9A5XfhYmujoHFjSsWavfGuoQ=; b=qXEJ5tv4b9w8DEhOPXJTBmf/4Lz4ZE901oL8gK2w1aAuAeZuigQ/F7E0nNndGyCtG7BtFN lTyQJqWNKa6mPhVdo2BguH+kGSs21vsTAKNK5WFscTsHQIVIZtg2v8G8O/LpN1qpnUby71 bae3YOHXA/buKu3O1CILO6qvk9j+T1rijxxA9Wd0SSgSjIY7fUdPoxw0VyWzctBDrBLr4K EnCp3R6vYQ+mRhYJCWKadwVgI1QLXkZ1NrfHPI2BMBdpfyu6FtM0LFmnGFIEq9hqoyiSnC agYSwe03Nkc4RzUGSPMLXK1yoPfXaMB5XS7EnBYzVhgy0dj/LHz2KgFI6IbCUA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1752832385; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=ijEXlgv7KJLUBa4HLRd9A5XfhYmujoHFjSsWavfGuoQ=; b=B4ucx1Holt5gQvfed6KnEEozVJqdlYFael5w01aFHT0icaeupCvL/slSYKgwlbQ70PG53X EVAOnthI//CCupP0CyxXmR3kqCoPvwBOGIzQKSeVBgQvVnoG8jItfcATRjt6NAouPj73dq HXbOHcEGJzJ4zpv6jLO14VrC4RHLXiIuxsYq1HukhuUq7HeG4Qc4QY5LwjFVteBAxDso/j 5fDeRQ2BzrJ1jjBFehFbPTExGaIFTnQFwrZiWFT+IPgzQsiuw7HjC50Ww3Is+0xbi2NCC7 eNow6H8gcQc3LUo+zATiEIQUvnoH6QWuk0RPGvm/Juf2pNyvMMpp7yL7dx7Cww== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1752832385; a=rsa-sha256; cv=none; b=knwYtuBpwi08qGL5dwr9fXKeQaVHA/1IlB5/hywZTrBQXQUqKcxsby41Wd4pJu3nuFnTIJ Ej6yVYxI7oiBrOvpAg1C3pn5ExLh15/EB1tuGmcKE47tOlefBFmtv6dkF/T890elD005S6 34dZFMvnLzF7lszUSPKFtRFa8Z8dRl/wz43FTnIv0VhjHfzY3abg+XHEvJmzoPSXbhSiBG rb2p74oew+HddeBOg2bNKS0WC6hNOGFODg5DDesxIKi/qbxCAVt3i2Z8Mv5PyjHUCW030h MEEHCA7wd2lcP0pYNFz2J6Tn+SKVi7nvc+fovH9u7/Aza1keQ9wjyNKsoCgVPg== Received: from gitrepo.freebsd.org (gitrepo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:5]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4bk4q515SvzbjQ; Fri, 18 Jul 2025 09:53:05 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from gitrepo.freebsd.org ([127.0.1.44]) by gitrepo.freebsd.org (8.18.1/8.18.1) with ESMTP id 56I9r5Gc046851; Fri, 18 Jul 2025 09:53:05 GMT (envelope-from git@gitrepo.freebsd.org) Received: (from git@localhost) by gitrepo.freebsd.org (8.18.1/8.18.1/Submit) id 56I9r5Od046848; Fri, 18 Jul 2025 09:53:05 GMT (envelope-from git) Date: Fri, 18 Jul 2025 09:53:05 GMT Message-Id: <202507180953.56I9r5Od046848@gitrepo.freebsd.org> To: src-committers@FreeBSD.org, dev-commits-src-all@FreeBSD.org, dev-commits-src-main@FreeBSD.org From: Kristof Provost Subject: git: da319c4d8c20 - main - pf.conf.5: update syncookie example List-Id: Commit messages for all branches of the src repository List-Archive: https://lists.freebsd.org/archives/dev-commits-src-all List-Help: List-Post: List-Subscribe: List-Unsubscribe: X-BeenThere: dev-commits-src-all@freebsd.org Sender: owner-dev-commits-src-all@FreeBSD.org MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit X-Git-Committer: kp X-Git-Repository: src X-Git-Refname: refs/heads/main X-Git-Reftype: branch X-Git-Commit: da319c4d8c20e9a99d36865e1529e84b47b53289 Auto-Submitted: auto-generated The branch main has been updated by kp: URL: https://cgit.FreeBSD.org/src/commit/?id=da319c4d8c20e9a99d36865e1529e84b47b53289 commit da319c4d8c20e9a99d36865e1529e84b47b53289 Author: Kristof Provost AuthorDate: 2025-07-09 13:16:42 +0000 Commit: Kristof Provost CommitDate: 2025-07-18 07:33:29 +0000 pf.conf.5: update syncookie example Multiply the number of states in the example adaptive timeout calculation by 10 so it works with the numbers in the config, which were previously multiplied. ok dlg@ Obtained from: OpenBSD, jmatthew , 5642facce3 Sponsored by: Rubicon Communications, LLC ("Netgate") --- share/man/man5/pf.conf.5 | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/share/man/man5/pf.conf.5 b/share/man/man5/pf.conf.5 index 11e22ebc78bf..ea3735482e42 100644 --- a/share/man/man5/pf.conf.5 +++ b/share/man/man5/pf.conf.5 @@ -365,7 +365,7 @@ set timeout { adaptive.start 60000, adaptive.end 120000 } set limit states 100000 .Ed .Pp -With 9000 state table entries, the timeout values are scaled to 50% +With 90000 state table entries, the timeout values are scaled to 50% (tcp.first 60, tcp.established 43200). .It Ar set loginterface Enable collection of packet and byte count statistics for the given