From owner-freebsd-questions@FreeBSD.ORG  Sun Mar  9 14:08:27 2008
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id CB85F106566C
	for <freebsd-questions@freebsd.org>;
	Sun,  9 Mar 2008 14:08:27 +0000 (UTC)
	(envelope-from ervin23@gmail.com)
Received: from wf-out-1314.google.com (wf-out-1314.google.com [209.85.200.173])
	by mx1.freebsd.org (Postfix) with ESMTP id 66DB58FC15
	for <freebsd-questions@freebsd.org>;
	Sun,  9 Mar 2008 14:08:26 +0000 (UTC)
	(envelope-from ervin23@gmail.com)
Received: by wf-out-1314.google.com with SMTP id 25so1362336wfa.7
	for <freebsd-questions@freebsd.org>;
	Sun, 09 Mar 2008 07:08:26 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma;
	h=domainkey-signature:received:received:message-id:date:from:to:subject:mime-version:content-type:content-transfer-encoding:content-disposition;
	bh=alC9xa3OsnOKaOOxrL4uxje+PTc5r4p8HxJX9zIupI8=;
	b=vbPZO4fkItbuDf9Nhu03ashuj9DLLFtgo6kjH/Oy4VrVkCOGyY/SnCo/f5Ao87TIRSeMiltACGKrKawMBUToGqXQLRCb7iWZKx7yqGx6f2Jz+mXxiOV3V7yPaKlS2g5Sz8QlMiZG/eitZmiLMY1WjQmR22hexfp1wCll/8mq/Ik=
DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma;
	h=message-id:date:from:to:subject:mime-version:content-type:content-transfer-encoding:content-disposition;
	b=stbyNBm8NjZoCN9Ojk6nEzHULwJTr0+9TSVW9Zz+o9U5TlbzZmRSIAPKTdsRWCd9O918xpxNEwVbb9bgYWZeLY/7JI0KR5sfmFGa0ZPaowDDvXSeA/6rNRD8YZzgKqwKU5zGfgCz5HLo1ZqkSYOG3lOsfEiiIrgbwYxYQRC86wU=
Received: by 10.142.255.12 with SMTP id c12mr1398442wfi.26.1205070263418;
	Sun, 09 Mar 2008 06:44:23 -0700 (PDT)
Received: by 10.142.11.10 with HTTP; Sun, 9 Mar 2008 06:44:23 -0700 (PDT)
Message-ID: <b4d972400803090644t48326375l5cd5be136932e188@mail.gmail.com>
Date: Sun, 9 Mar 2008 14:44:23 +0100
From: ervin <ervin23@gmail.com>
To: freebsd-questions@freebsd.org
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
Subject: IPFW - kernel: drop session / too many entries
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sun, 09 Mar 2008 14:08:27 -0000

I get this message in the /etc/security file:

Mar  9 14:24:45 FreeWeb kernel: drop session 80.198.0.217:61236 ->
192.168.1.99:80, too many entries

which causes a delay when accessing the web server (one of them is
www.valentin-jensen.org)

I have the following in my sysctl.conf:

net.inet.ip.fw.verbose=1
net.inet.ip.fw.verbose_limit=5
net.inet.ip.fw.dyn_max=8192

Any ideas ?

-- 

mvh/best regards  ervin