[ipfw] Dynamic rules grow indefinitely..
Andrey V. Elsukov
bu7cher at yandex.ru
Sat Dec 9 10:06:19 PST 2006
>It is a web server with ~130req/s, problems seem to start after
>upgrading to a new hardware.
Can you show your /var/run/dmesg.boot, and output of `pciconf -lv` and ifconfig?
>After a hour it will grow more and more.. The day before yesterday I
>got 20 000 dynamic rules ;o) (I was forced to increase
>net.inet.ip.fw.dyn_max because I start to got errors in syslogs).
# sysctl -w net.inet.ip.fw.dyn_keepalive=0
WBR, Andrey V. Elsukov
More information about the freebsd-stable