Ruy Bento wrote:
Hi,
I have a server with:
OpenBSD 4.7 (GENERIC) #558: Wed Mar 17 20:46:15 MDT 2010
dera...@i386.openbsd.org:/usr/src/sys/arch/i386/compile/GENERIC
cpu0: Intel Pentium II ("GenuineIntel" 686-class, 512KB L2 cache) 234MHz
cpu0: FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,SEP,MTRR,PGE,MCA,CMOV,MMX
real mem = 100233216 (95MB)
avail mem = 87961600 (83MB)
With sendmail and spamd in blacklist (/etc/rc.conf.local):
spamd_flags="-bv" # for normal use: "" and see spamd(8)
spamd_black=YES # set to YES to run spamd without greylisting
spamlogd_flags="-i rl0" # use eg. "-i interface" and see spamlogd(8)
/etc/mail/spamd.conf:
with :china:korea: it's ok
with :uatraps:china:korea: -> pfctl: Cannot allocate memory.
or
:nixspam::china:korea: -> pfctl: Cannot allocate memory.
with the shell /usr/libexec/spamd-setup -bd
vmstat -m
_________________________________________________
....
pfrke_plain 92 19616 3 1175 429 394 35 168 0
8 8
.....
In use 2275K, total allocated 3808K; utilization 59.7%
________________________________________________
pstat -s
Device 512-blocks Used Avail Capacity Priority
swap_device 329980 0 329980 0% 0
In OpenBSD 4.6 the same hardware and config ... no problem.
I try several setups: Core2 Duo with 1 GB RAM (the same config) 4.6
and 4.7, works.
But ... 4.6 and 4.7 with 128MB, 4.7 give the same error: "pfctl:
Cannot allocate memory. "
So I change
set limit tables 10000
set limit table-entries 5000000
in pf.conf, but no luck.
My question is: In this small env. (100 MB - RAM) I need to change the
Kernel memory or other sysctl value, which one?
I work with OpenBSd for more 10 years Intel, AMD, PPC - Webhosting,
Servers, Firewalls.
Thank you for your great effort and work.
Best regards,
Ruy Benton
OK, I'm game to ask after seeing Theo's response. I actually have some
equipment like this, not that I use it this way, "normally".
So, change a setting or rewrite things to fit better in this small
memory space?
I was actually using that laptop to make some pretty extensive website
changes last year, while traveling with little internet access.
Filled those boring hours while I waked up hours before the "world" back
then. No regrets having brought that old thing with me! :)
Chris Bennett
