Maybe this:
set limit option value
Set various limits on pf's operation.
* frags - maximum number of entries in the memory pool used
for packet reassembly (scrub rules). Default is 5000.
* src-nodes - maximum number of entries in the memory pool
used for tracking source IP addresses (generated by the sticky-address
and source-track options). Default is 10000.
* states - maximum number of entries in the memory pool used
for state table entries (filter rules that specify keep state).
Default is 10000.
or this:
set timeout option value
Set various timeouts (in seconds).
* interval - seconds between purges of expired states and
packet fragments. The default is 10.
* frag - seconds before an unassembled fragment is expired.
The default is 30.
* src.track - seconds to keep a source tracking entry in
memory after the last state expires. The default is 0 (zero).
Try change this options.
Gilberto
2006/11/30, Artyom Viklenko <[EMAIL PROTECTED]>:
<quote who="Gilberto Villani Brito">
> Look this options: http://www.openbsd.org/faq/pf/options.html in your
> pf.conf.
Sorry, which option exactly you mention?
>
> Gilberto
>
> 2006/11/30, Artyom Viklenko <[EMAIL PROTECTED]>:
>> Hi, All!
>>
>> PF-NAT in FreeBSD does not support multiple
>> instances of pptp connections from internal network.
>>
>> If it will be improved in some time in the future?
>> What about using libalias in pf or if it possible
>> to use ng_nat in pf?
>>
>> May be I'm klueless... please, point me in right
>> direction. :)
>>
>> --
>> Sincerely yours,
>> Artyom Viklenko.
>> -------------------------------------------------------
>> [EMAIL PROTECTED] | http://www.aws-net.org.ua/~artem
>> FreeBSD: The Power to Serve - http://www.freebsd.org
>>
>>
>> _______________________________________________
>> [email protected] mailing list
>> http://lists.freebsd.org/mailman/listinfo/freebsd-pf
>> To unsubscribe, send any mail to "[EMAIL PROTECTED]"
>>
> _______________________________________________
> [email protected] mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-pf
> To unsubscribe, send any mail to "[EMAIL PROTECTED]"
>
--
Sincerely yours,
Artyom Viklenko.
-------------------------------------------------------
[EMAIL PROTECTED] | http://www.aws-net.org.ua/~artem
FreeBSD: The Power to Serve - http://www.freebsd.org
_______________________________________________
[email protected] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-pf
To unsubscribe, send any mail to "[EMAIL PROTECTED]"
