net.pf.request_maxcount not working after upgrading from 12.1-RELEASE to 12.2 RELEASE.

Dimitry Andric dimitry at andric.com
Sat Dec 12 13:42:27 UTC 2020


On 12 Dec 2020, at 10:55, Segreteria <segreteria at delluomo-morettin.com> wrote:
> 
> I can no longer load pf at boot without workarounds as after upgrade to 12.2-RELEASE net.pf.request_maxcount=300000 in /boot/loader.conf is not loaded before pf starts.
> 
> Can somebody explain exactly why is this happening? Is this a new policy of this kernel parameter?

It seems to have changed with https://svnweb.freebsd.org/changeset/base/364456:

------------------------------------------------------------------------
r364456 | kp | 2020-08-21 15:11:33 +0200 (Fri, 21 Aug 2020) | 7 lines

MFC r355744:

pf: Make request_maxcount runtime adjustable

There's no reason for this to be a tunable. It's perfectly safe to
change this at runtime.
------------------------------------------------------------------------


> What is the suggested way to face this change?

I believe it must be set in sysctl.conf(5) after this change.

-Dimitry



More information about the freebsd-pf mailing list