Re: pfctl explaination

Previous message: [thread] [date] [author]
Next message: [thread] [date] [author]
From: askthelist
Date: Tuesday, September 11, 2007 - 3:15 pm

I'm having a similar issue as to whats described here.

In my situation I have a table with about 200 entries. Im attempting to
update that table and add about 200 more entries. I've included network
blocks this time with the biggest being a /18. I update my
/etc/blackhole.abuse file, then I run pfctl -t abuse -Tflush as described in
this thread, and then i reload the pf.conf file with pfctl -f /etc/pf.conf.
When I do this any thing in the state table seems to flow as usual, however
any new sessions timeout. Im not sure whats going on? I tried bumping up the
table-entries limit with no luck. Any help would be appreciated. I've
included the relevant lines from my pf.conf file.

table <abuse> persist file "/etc/blackhole.abuse"
set limit { states 1000000, tables 1000, table-entries 300000 }
block in log quick on { $ext_if } proto { tcp udp } from <abuse> to any
label "abuse"

On 6/21/07, Francesco Toscan <francesco.toscan+openbsd@gmail.com> wrote:
Previous message: [thread] [date] [author]
Next message: [thread] [date] [author]

Messages in current thread:
pfctl explaination, Francesco Toscan, (Wed Jun 20, 7:41 am)
Re: pfctl explaination, Ted Unangst, (Wed Jun 20, 2:21 pm)
Re: pfctl explaination, Francesco Toscan, (Thu Jun 21, 1:47 am)
Re: pfctl explaination, Peter N. M. Hansteen, (Thu Jun 21, 2:05 am)
Re: pfctl explaination, Francesco Toscan, (Thu Jun 21, 2:18 am)
Re: pfctl explaination, askthelist, (Tue Sep 11, 3:15 pm)