> -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED]]On Behalf Of dweise
> hi, > i'm still looking as to why i'm getting a performance hit from ipfilter. My configuration is tiny compared to yours, so I don't think it would provide a useful data point (half a dozen NAT users on a 166MHz Pentium 3, 128MB RAM running FreeBSD). But my gut reaction to reading your description of hitting a performance wall somewhere around 60k active NAT sessions makes me think the number is suspiciously close to the maximum of 65,536 ports per IP address. Maybe there's some kind of thrashing going on as it runs out of port numbers to map for a given IP address? What does "top" say? Are you getting high cpu or system interrupt levels? ..chris
