From owner-freebsd-questions@FreeBSD.ORG  Wed Jan 21 11:20:54 2004
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 7CE2A16A4CE
	for <questions@freebsd.org>; Wed, 21 Jan 2004 11:20:54 -0800 (PST)
Received: from web41403.mail.yahoo.com (web41403.mail.yahoo.com
	[66.218.93.69])	by mx1.FreeBSD.org (Postfix) with SMTP id 5F33D43D39
	for <questions@freebsd.org>; Wed, 21 Jan 2004 11:20:53 -0800 (PST)
	(envelope-from davemac11@yahoo.com)
Message-ID: <20040121192052.15532.qmail@web41403.mail.yahoo.com>
Received: from [168.91.4.66] by web41403.mail.yahoo.com via HTTP;
	Wed, 21 Jan 2004 11:20:52 PST
Date: Wed, 21 Jan 2004 11:20:52 -0800 (PST)
From: Dave McCammon <davemac11@yahoo.com>
To: questions@freebsd.org
In-Reply-To: <200401211727.i0LHRW56010949@smtp.techweavers.net>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Subject: Re: IPFW and Dynamic Rules
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 21 Jan 2004 19:20:54 -0000


--- Adam Seniuk <adams@techweavers.net> wrote:
> I keep getting /kernel: Too many dynamic rules,
> sorry im my log file several
> times and i am not sure whats going on I have read
> some articles but they
> are all in 2000 and for FreeBSD 4.0.
>  
> If someone could give me a clue into what this is
> and how I can fix it. That
> would be great!
>  
> Thanks.
>  
> 
> Adam Seniuk
> 
> adams@techweavers.net
> 
[snip]

>From the IPFW(8)
 net.inet.ip.fw.dyn_max: 8192
             Maximum number of dynamic rules.  When
you hit this limit, no more dynamic rules can be
installed until old ones expire.

Default on my FBSD 4.9 box with (options IPFW2 in
kernel config) is 4096.

It may be helpful to tweak this setting or adjust the
expire time.(net.inet.ip.fw.dyn_ack_lifetime). There
are other sysctl knobs you can tweak. Check the man
page.


__________________________________
Do you Yahoo!?
Yahoo! Hotjobs: Enter the "Signing Bonus" Sweepstakes
http://hotjobs.sweepstakes.yahoo.com/signingbonus