Date: Thu, 5 Apr 2001 15:50:03 -0700 (PDT) From: Dima Dorfman <dima@unixfreak.org> To: freebsd-doc@freebsd.org Subject: Re: docs/26366: ipfw(8) doesn't document which sysctl control dynamic rules Message-ID: <200104052250.f35Mo3818468@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
The following reply was made to PR docs/26366; it has been noted by GNATS.
From: Dima Dorfman <dima@unixfreak.org>
To: anarcat@tao.ca
Cc: freebsd-gnats-submit@freebsd.org
Subject: Re: docs/26366: ipfw(8) doesn't document which sysctl control dynamic rules
Date: Thu, 05 Apr 2001 15:47:19 -0700
anarcat@tao.ca writes:
>
> >Number: 26366
> >Category: docs
> >Synopsis: ipfw(8) doesn't document which sysctl control dynamic rules
>
> Note that it mentions sysctl(8) variables, but does not specify
> which. I have not been able to find the specification anywhere. In
> sysctl(8) or anywhere else..
No offense, but you can't have looked too hard. There's a section in
ipfw(8) titled ``SYSCTL VARIABLES'' which documents all the sysctls in
the net.inet.ip.fw tree. Here's an excerpt:
SYSCTL VARIABLES
A set of sysctl(8) variables controls the behaviour of the firewall.
These are shown below together with their default value and meaning:
net.inet.ip.fw.debug: 1
Controls debugging messages produced by ipfw.
net.inet.ip.fw.one_pass: 1
[...]
net.inet.ip.fw.dyn_buckets: 256
net.inet.ip.fw.curr_dyn_buckets: 256
The configured and current size of the hash table used to hold
dynamic rules. This must be a power of 2. The table can only be
resized when empty, so in order to resize it on the fly you will
probably have to flush and reload the ruleset.
[...]
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-doc" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200104052250.f35Mo3818468>