summaryrefslogtreecommitdiff
path: root/share/man
diff options
context:
space:
mode:
authorJoel Knight <joel@cvs.openbsd.org>2006-01-18 03:45:29 +0000
committerJoel Knight <joel@cvs.openbsd.org>2006-01-18 03:45:29 +0000
commitd350e422c5cfeedfb2669b314df04831afb758a2 (patch)
tree943160e3c9e60bf2f34a33012b040b2d97342f32 /share/man
parent14bbbbfbcef0a6aacd031e5fe31d50a8603e46c8 (diff)
Document the "tables" and "table-entries" limit options.
ok jmc@ mcbride@
Diffstat (limited to 'share/man')
-rw-r--r--share/man/man5/pf.conf.516
1 files changed, 13 insertions, 3 deletions
diff --git a/share/man/man5/pf.conf.5 b/share/man/man5/pf.conf.5
index 09e6159c942..506169e4617 100644
--- a/share/man/man5/pf.conf.5
+++ b/share/man/man5/pf.conf.5
@@ -1,4 +1,4 @@
-.\" $OpenBSD: pf.conf.5,v 1.339 2005/11/17 22:18:20 joel Exp $
+.\" $OpenBSD: pf.conf.5,v 1.340 2006/01/18 03:45:28 joel Exp $
.\"
.\" Copyright (c) 2002, Daniel Hartmeier
.\" All rights reserved.
@@ -369,7 +369,7 @@ sets the maximum number of entries in the memory pool used for fragment
reassembly (generated by
.Ar scrub
rules) to 20000.
-Finally,
+Using
.Bd -literal -offset indent
set limit src-nodes 2000
.Ed
@@ -380,8 +380,18 @@ source IP addresses (generated by the
and
.Ar source-track
options) to 2000.
+Using
+.Bd -literal -offset indent
+set limit tables 1000
+set limit table-entries 100000
+.Ed
+.Pp
+sets limits on the memory pools used by tables.
+The first limits the number of tables that can exist to 1000.
+The second limits the overall number of addresses that can be stored
+in tables to 100000.
.Pp
-These can be combined:
+Various limits can be combined on a single line:
.Bd -literal -offset indent
set limit { states 20000, frags 20000, src-nodes 2000 }
.Ed