[Bug 263626] PF is unable to load more than 200000 entries
Date: Thu, 28 Apr 2022 10:02:11 UTC
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=263626
Bug ID: 263626
Summary: PF is unable to load more than 200000 entries
Product: Base System
Version: 13.0-RELEASE
Hardware: arm64
OS: Any
Status: New
Severity: Affects Some People
Priority: ---
Component: kern
Assignee: bugs@FreeBSD.org
Reporter: dmilith@me.com
To make a long story short:
I'm trying to load more than 200k entries to my <blocked> list:
```
# Blocked list
table <blocked> persist file "/etc/spammers" file "/etc/blocklist"
block in quick from <blocked>
block out quick to <blocked>
```
According to the pf documentation, I should be able to set:
`set limit table-entries 300000` in /etc/pf.conf and do `pfctl -Tl -f
/etc/pf.conf` to reload it but this doesn't work. The limit is still 200k
entries.
I've also tried bumping the `net.pf.request_maxcount` sysctl to some huge
value, but that didn't help.
My testing procedure:
In my experiment, I've generated 27000000+ addresses in my source text file,
which I split by a certain amount and store one fragment as /etc/blocklist. No
matter what I do I'm unable to load more than 200k lines/ IP entries to the pf.
--
You are receiving this mail because:
You are the assignee for the bug.