ipfw: Too many dynamic rules

[Gareth de Vaux]

On Tue 2010-09-14 (04:30), Jeremy Chadwick wrote:
> Regarding net.inet.tcp.finwait2_timeout=15000 -- you don't see any
> improvement at all?  That's a bit strange.  There's probably something

If there was an improvement it was subtle (I was doing sporadic
measurements), just that in the end my firewall was getting overloaded
either way.

> FWIW, I'd recommend keeping an appended log of output from something
> like this script:

will do