pf state options

Earl Lapus earl.lapus at gmail.com
Mon Aug 23 05:33:03 UTC 2010


Hi,

I've setup the following rules in pf.conf
---
set limit states 20000
pass in from 192.168.56.100 to any keep state (max 30000)
---

It loads perfectly fine. However, if you noticed, the max states value
in the rule (30000) is greater than the hard limit (20000).
So my question is: what is the distinction between the states count
specified in `set limit states (n)` with the `max (n)` specified in a
rule? Are they at all related?

Cheers!

-- 
There are seven words in this sentence.


More information about the freebsd-pf mailing list