pfctl: Cannot allocate memory and spamd-setup -bd

[Ruy Bento]

Hi,

I have a server with:
OpenBSD 4.7 (GENERIC) #558: Wed Mar 17 20:46:15 MDT 2010
    dera...@i386.openbsd.org:/usr/src/sys/arch/i386/compile/GENERIC
cpu0: Intel Pentium II ("GenuineIntel" 686-class, 512KB L2 cache) 234MHz
cpu0: FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,SEP,MTRR,PGE,MCA,CMOV,MMX
real mem  = 100233216 (95MB)
avail mem = 87961600 (83MB)


With sendmail and spamd in blacklist (/etc/rc.conf.local):

spamd_flags="-bv"       # for normal use: "" and see spamd(8)
spamd_black=YES         # set to YES to run spamd without greylisting
spamlogd_flags="-i rl0" # use eg. "-i interface" and see spamlogd(8)




/etc/mail/spamd.conf:

with        :china:korea:              it's ok

with        :uatraps:china:korea:  ->  pfctl: Cannot allocate memory.

or
            :nixspam::china:korea: ->  pfctl: Cannot allocate memory.

with the shell /usr/libexec/spamd-setup -bd


vmstat -m
_________________________________________________
....
pfrke_plain   92    19616    3     1175   429   394    35   168     0 
  8    8

.....

In use 2275K, total allocated 3808K; utilization 59.7%
________________________________________________



pstat -s
Device      512-blocks     Used    Avail Capacity  Priority
swap_device     329980        0   329980     0%    0


In OpenBSD 4.6 the same hardware and config ... no problem.

I try several setups: Core2 Duo with 1 GB RAM (the same config) 4.6 and 
4.7, works.

But ... 4.6 and 4.7 with 128MB, 4.7 give the same error: "pfctl: Cannot 
allocate memory. "

So I change

    set limit tables 10000
    set limit table-entries 5000000

in pf.conf, but no luck.

My question is: In this small env. (100 MB - RAM) I need to change the 
Kernel memory or other sysctl value, which one?

I work with OpenBSd for more 10 years Intel, AMD, PPC - Webhosting, 
Servers, Firewalls.

Thank you for your great effort and work.

Best regards,
Ruy Benton