Fwd: svn commit: r223637 - in head: . contrib/pf/authpf contrib/pf/ftp-proxy contrib/pf/man contrib/pf/pfctl contrib/pf/pflogd sbin/pflogd sys/conf sys/contrib/altq/altq sys/contrib/pf/net sys/modules

Original Message Subject: svn commit: r223637 - in head: . contrib/pf/authpf contrib/pf/ftp-proxy contrib/pf/man contrib/pf/pfctl contrib/pf/pflogd sbin/pflogd sys/conf sys/contrib/altq/altq sys/contrib/pf/net sys/modules s... Date: Tue, 28 Jun 2011 11:57:25 + (UTC) From:

Re: pfctl: Cannot allocate memory.

it loaded 75480 entries just now). As far as I understand by default pf can hold up to 20 entries in a table (please correct me if I'm wrong). Better to set this limit explicitly in pf.conf, e. g. set limit table-entries 200000 -- A

max-src-conn issue

: Wed Apr 8 05:31:05 MSD 2009 cit...@citrin.park.rambler.ru:/usr/obj/usr/src/sys/GENERIC amd64 I have tested same rules on OpenBSD 4.4 - they works as expected - when limit reached, packets matched by first rule dropped, and new state not created. --