tech-net archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]
NPF tuning
Hi,
It seems I cannot load a ruleset with more than 120 (128?) rules:
npfctl: npfctl_config_send: Invalid argument
Is there a limit on rule count? How to raise?
In IPFilter and PF I also have to tune some other limits, eg. state
table size, max frag size, etc.
PF:
set limit states 120000
set limit frags 20000
IPFilter:
ipfilter_flags="-T
state_max=30011,state_size=40009,nat_table_size=40009,nat_table_max=120000"
Isn't this necessary on NPF? Can it play well with ~80.000 states by
default?
Thanks,
--
Gergely EGERVARY
Home |
Main Index |
Thread Index |
Old Index