From owner-freebsd-stable@FreeBSD.ORG  Wed Apr 26 13:34:06 2006
Return-Path: <owner-freebsd-stable@FreeBSD.ORG>
X-Original-To: stable@freebsd.org
Delivered-To: freebsd-stable@FreeBSD.ORG
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id C28CD16A40F
	for <stable@freebsd.org>; Wed, 26 Apr 2006 13:34:06 +0000 (UTC)
	(envelope-from oleg@lath.rinet.ru)
Received: from lath.rinet.ru (lath.rinet.ru [195.54.192.90])
	by mx1.FreeBSD.org (Postfix) with ESMTP id E0FC843D4C
	for <stable@freebsd.org>; Wed, 26 Apr 2006 13:34:05 +0000 (GMT)
	(envelope-from oleg@lath.rinet.ru)
Received: from lath.rinet.ru (localhost [127.0.0.1])
	by lath.rinet.ru (8.13.4/8.13.4) with ESMTP id k3QDY3v0097328
	(version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO);
	Wed, 26 Apr 2006 17:34:03 +0400 (MSD)
	(envelope-from oleg@lath.rinet.ru)
Received: (from oleg@localhost)
	by lath.rinet.ru (8.13.4/8.13.4/Submit) id k3QDY3Ve097327;
	Wed, 26 Apr 2006 17:34:03 +0400 (MSD) (envelope-from oleg)
Date: Wed, 26 Apr 2006 17:34:03 +0400
From: Oleg Bulyzhin <oleg@freebsd.org>
To: Ivan Voras <ivoras@fer.hr>
Message-ID: <20060426133403.GB97137@lath.rinet.ru>
References: <444E160D.3000401@fer.hr> <444E173B.6020003@fer.hr>
	<20060425222915.GC88447@lath.rinet.ru> <444F530C.5060806@fer.hr>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <444F530C.5060806@fer.hr>
User-Agent: Mutt/1.5.11
Cc: stable@freebsd.org
Subject: Re: ipfw problems?
X-BeenThere: freebsd-stable@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Production branch of FreeBSD source code <freebsd-stable.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-stable>, 
	<mailto:freebsd-stable-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-stable>
List-Post: <mailto:freebsd-stable@freebsd.org>
List-Help: <mailto:freebsd-stable-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-stable>,
	<mailto:freebsd-stable-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 26 Apr 2006 13:34:06 -0000

On Wed, Apr 26, 2006 at 01:01:32PM +0200, Ivan Voras wrote:
> Oleg Bulyzhin wrote:
> 
> >Next time this happen check following sysctls:
> >net.inet.ip.fw.dyn_max
> >net.inet.ip.fw.dyn_count
> >
> >I guess you've hit the limit.
> 
> If so, is it safe to increase dyn_max to, for example, 8192?

Sure.

P.S. if you increase dyn_max i'd suggest increase net.inet.ip.fw.dyn_buckets too

-- 
Oleg.