Date: Wed, 26 Apr 2006 17:34:03 +0400 From: Oleg Bulyzhin <oleg@freebsd.org> To: Ivan Voras <ivoras@fer.hr> Cc: stable@freebsd.org Subject: Re: ipfw problems? Message-ID: <20060426133403.GB97137@lath.rinet.ru> In-Reply-To: <444F530C.5060806@fer.hr> References: <444E160D.3000401@fer.hr> <444E173B.6020003@fer.hr> <20060425222915.GC88447@lath.rinet.ru> <444F530C.5060806@fer.hr>
next in thread | previous in thread | raw e-mail | index | archive | help
On Wed, Apr 26, 2006 at 01:01:32PM +0200, Ivan Voras wrote: > Oleg Bulyzhin wrote: > > >Next time this happen check following sysctls: > >net.inet.ip.fw.dyn_max > >net.inet.ip.fw.dyn_count > > > >I guess you've hit the limit. > > If so, is it safe to increase dyn_max to, for example, 8192? Sure. P.S. if you increase dyn_max i'd suggest increase net.inet.ip.fw.dyn_buckets too -- Oleg.
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20060426133403.GB97137>