RES: Trouble with PF

Chris Marlatt cmarlatt at rxsec.com
Thu Sep 27 06:52:12 PDT 2007


David Verzolla wrote:
> Hi,
> The limit of the states was reached.
> 
> "set limit { states 70000, frags 5000 }": solves my problem.
> 
> Have anyone that has a number higher then 100000?
> 
> Regards,
> 
> David
> 

One of the firewalls I maintain averages at ~420k without issue or
special memory tuning and during a D/DoS I've had others go up as high
as 1.8 million, though you do need to tune your memory settings to get
more than a million.

Regards,

	Chris


More information about the freebsd-pf mailing list