Stuart Remphrey wrote: > In some earlier tests we changed the IPF state table > size (and max) to larger (but still prime) values by > changin ip_state.h and rebuilding/installing the package, > which requires a separate package for each size. > > The size needs to be set as the ipf module loads, > so it dynamically allocates the desired size. > If the variables are set in /etc/system then the new > values do show up (visible with mdb -k), however > does this occur early enough in the process > that ipf will allocate using the desired value? >
Yes. You can also set these values via /usr/kernel/drv/ipf.conf, but the correct syntax for this...it might just be "fr_statesize=11001101". Darren
