Re: ipfilter breaks TCP connexions

[Emmanuel Dreyfus <manu%netbsd.org@localhost>]

On Mon, Jun 07, 2010 at 10:58:51AM +0000, Emmanuel Dreyfus wrote:
> Is there a known problem? I wonder if this could not be because the
> state table is full (I recall having to rebuild a kernel with some
> option about that on the previous machine, but it was a very long
> time ago, and I don't find the relevant options in the sources anymore)

I finaly found the option I used last time. I increased a bit the default value:
options IPSTATE_MAX=8419
options IPSTATE_SIZE=12007

-- 
Emmanuel Dreyfus
manu%netbsd.org@localhost