Hi,
I just updated an 8-STABLE box to 9-BETA3 and have a problem where PF
keeps growing the "current entries" indefinitely. I saw another person
with a similar issue:
http://groups.google.com/group/mailing.freebsd.current/browse_thread/thread/f350be446d1914d8?pli=1
But I didn't get any reply.
I rebuilt world again once more after the initial 8-STABLE upgrade to
see if it would fix itself but no luck. My firewall rules haven't
changed and from what I've read I shouldn't need to change anything
for this update. Anyone have any ideas? Flusing states will clear out
the 34 states but won't clear the current entries. I've had to do the
following in pf.conf to keep my home router up for more than a day:
set limit states 1600000 # this used to be 30k
Thanks,
Brad
pfctl -ss | wc -l
34
pfctl -si
Status: Enabled for 3 days 13:53:17 Debug: Urgent
Interface Stats for em0 IPv4 IPv6
Bytes In 3305522392 0
Bytes Out 425326123 0
Packets In
Passed 3651954 0
Blocked 25784 0
Packets Out
Passed 2919432 0
Blocked 737 0
State Table Total Rate
current entries 229706
searches 45831728 148.2/s
inserts 229706 0.7/s
removals 0 0.0/s
Counters
match 287626 0.9/s
bad-offset 0 0.0/s
fragment 0 0.0/s
short 0 0.0/s
normalize 0 0.0/s
memory 0 0.0/s
bad-timestamp 0 0.0/s
congestion 0 0.0/s
ip-option 0 0.0/s
proto-cksum 0 0.0/s
state-mismatch 264 0.0/s
state-insert 1 0.0/s
state-limit 0 0.0/s
src-limit 62 0.0/s
synproxy 2194 0.0/s
_______________________________________________
[email protected] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-pf
To unsubscribe, send any mail to "[email protected]"
