From owner-freebsd-security Tue Jul 31 12:27:23 2001 Delivered-To: freebsd-security@freebsd.org Received: from mail.wlcg.com (unknown [198.92.199.5]) by hub.freebsd.org (Postfix) with ESMTP id E1FE737B426 for ; Tue, 31 Jul 2001 12:27:16 -0700 (PDT) (envelope-from rsimmons@wlcg.com) Received: from localhost (rsimmons@localhost) by mail.wlcg.com (8.11.4/8.11.4) with ESMTP id f6VJQWB27936 for ; Tue, 31 Jul 2001 15:26:32 -0400 (EDT) (envelope-from rsimmons@wlcg.com) Date: Tue, 31 Jul 2001 15:26:28 -0400 (EDT) From: Rob Simmons To: Subject: ipfilter state tables Message-ID: <20010731151035.B11705-100000@mail.wlcg.com> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org -----BEGIN PGP SIGNED MESSAGE----- Hash: RIPEMD160 I noticed that the code around the IPSTATE_SIZE and IPSTATE_MAX constants in: src/contrib/ipfilter/ip_state.h src/sys/contrib/ipfilter/netinet/ip_state.h has changed and there was a line added to: src/contrib/ipfilter/HISTORY "allow state/nat table sizes to be externally influenced" I had suggested that a sysctl knob, or a kernel config file knob be added to control these. Does this mean that the knob exists? I looked in the man page for sysctl and did not see anything, nor did I see anything in LINT about it. Am I looking in the wrong place, or was that change just a preparation for adding the knob? Robert Simmons Systems Administrator http://www.wlcg.com/ -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.6 (FreeBSD) Comment: For info see http://www.gnupg.org iD8DBQE7ZwZov8Bofna59hYRA03GAJ9ZvKVkrdo/NXwJfc1VT++2dtaGHACggIpc 9uQMgglQMZcI7FAzYHnKjnM= =/jwj -----END PGP SIGNATURE----- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message