[Bug 235076] pf.conf unable to import a table larger than 65535 entries

bugzilla-noreply at freebsd.org bugzilla-noreply at freebsd.org
Sun Jan 20 11:35:40 UTC 2019


https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=235076

            Bug ID: 235076
           Summary: pf.conf unable to import a table larger than 65535
                    entries
           Product: Base System
           Version: 12.0-RELEASE
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Only Me
          Priority: ---
         Component: conf
          Assignee: bugs at FreeBSD.org
          Reporter: freebsd at haraschak.com

My /etc/pf.conf contains the following line:
`table <nets> persist file "/etc/pf.nets"`

When called using `pfctl -f /etc/pf.conf` the system outputs "cannot define:
Invalid argument."

This is due to the ioctl limit set by `sysctl net.pf.request_maxcount` as my
table contains over 80K entries.

This limit was introduced in 12.0:
https://freshbsd.org/commit/freebsd/src/332486
https://freshbsd.org/commit/freebsd/src/332404

I understand this it the intended behavior, just wanted to bring it to your
attention as it's not in the release notes and the error is a bit ambiguous.

-- 
You are receiving this mail because:
You are the assignee for the bug.


More information about the freebsd-bugs mailing list