From owner-freebsd-questions Thu Feb 21 12:45: 3 2002 Delivered-To: freebsd-questions@freebsd.org Received: from ulixes.esc.ac.at (ulixes.esc.ac.at [193.170.216.34]) by hub.freebsd.org (Postfix) with ESMTP id 3CA6A37B400 for ; Thu, 21 Feb 2002 12:44:59 -0800 (PST) Received: from ulixes.esc.ac.at (localhost.esc.ac.at [127.0.0.1]) by ulixes.esc.ac.at (8.12.2/8.12.2) with ESMTP id g1LKiuHr051858; Thu, 21 Feb 2002 21:44:56 +0100 (CET) (envelope-from flo@ulixes.esc.ac.at) Received: (from flo@localhost) by ulixes.esc.ac.at (8.12.2/8.12.2/Submit) id g1LKitJU051857; Thu, 21 Feb 2002 21:44:55 +0100 (CET) (envelope-from flo) Date: Thu, 21 Feb 2002 21:44:55 +0100 From: Florian Nigsch To: C J Michaels , freebsd-questions@freebsd.org Subject: Re: ipfw: Too many dynamic rules, sorry Message-ID: <20020221214455.A51661@nigsch.com> References: <3175.216.153.201.211.1014322964.squirrel@www1.27in.tv> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.5.1i In-Reply-To: <3175.216.153.201.211.1014322964.squirrel@www1.27in.tv>; from cjm2@earthling.net on Thu, Feb 21, 2002 at 03:22:44PM -0500 Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG On Thu, Feb 21, 2002 at 03:22:44PM -0500, C J Michaels wrote: > 1. What's a good number for "net.inet.ip.fw.dyn_buckets"? I could just > keep tweaking it up until I stop getting the error, but I'm curious what > the pro/cons are of setting this number too high, and what too high would > be. Does anyone have any experience with this? No experience here... > 2. Any suggestions on how I can track down what may be generating so many > dynamic rules? To give you a contrast now, ipfw lists _no_ dynamic rules. ipfw -d list gives you the dynamic rules as well... flo -- --- Florian Nigsch http://flo.nigsch.com/ PGP key: http://flo.nigsch.com/fnigsch.asc To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message