On Tue, Nov 13, 2012 at 11:28:23PM +0400, Alexander V. Chernikov wrote: A> So, we can do the following: A> 1) lock increments/decrements via some separate mutex A> 2) do nothing A> 3) take some combined approach: 4) Take it via uma_zone_getcur(ipfw_dyn_rule_zone); -- Totus tuus, Glebius.