Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 28 Apr 2022 10:02:11 +0000
From:      bugzilla-noreply@freebsd.org
To:        bugs@FreeBSD.org
Subject:   [Bug 263626] PF is unable to load more than 200000 entries
Message-ID:  <bug-263626-227@https.bugs.freebsd.org/bugzilla/>

next in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D263626

            Bug ID: 263626
           Summary: PF is unable to load more than 200000 entries
           Product: Base System
           Version: 13.0-RELEASE
          Hardware: arm64
                OS: Any
            Status: New
          Severity: Affects Some People
          Priority: ---
         Component: kern
          Assignee: bugs@FreeBSD.org
          Reporter: dmilith@me.com

To make a long story short:

I'm trying to load more than 200k entries to my <blocked> list:

```
# Blocked list
table <blocked> persist file "/etc/spammers" file "/etc/blocklist"
block in quick from <blocked>
block out quick to <blocked>
```

According to the pf documentation, I should be able to set:

`set limit table-entries 300000` in /etc/pf.conf and do `pfctl -Tl -f
/etc/pf.conf` to reload it but this doesn't work. The limit is still 200k
entries.

I've also tried bumping the `net.pf.request_maxcount` sysctl to some huge
value, but that didn't help.


My testing procedure:

In my experiment, I've generated 27000000+ addresses in my source text file,
which I split by a certain amount and store one fragment as /etc/blocklist.=
 No
matter what I do I'm unable to load more than 200k lines/ IP entries to the=
 pf.

--=20
You are receiving this mail because:
You are the assignee for the bug.=



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-263626-227>