From d350e422c5cfeedfb2669b314df04831afb758a2 Mon Sep 17 00:00:00 2001 From: Joel Knight Date: Wed, 18 Jan 2006 03:45:29 +0000 Subject: Document the "tables" and "table-entries" limit options. ok jmc@ mcbride@ --- share/man/man5/pf.conf.5 | 16 +++++++++++++--- 1 file changed, 13 insertions(+), 3 deletions(-) (limited to 'share/man') diff --git a/share/man/man5/pf.conf.5 b/share/man/man5/pf.conf.5 index 09e6159c942..506169e4617 100644 --- a/share/man/man5/pf.conf.5 +++ b/share/man/man5/pf.conf.5 @@ -1,4 +1,4 @@ -.\" $OpenBSD: pf.conf.5,v 1.339 2005/11/17 22:18:20 joel Exp $ +.\" $OpenBSD: pf.conf.5,v 1.340 2006/01/18 03:45:28 joel Exp $ .\" .\" Copyright (c) 2002, Daniel Hartmeier .\" All rights reserved. @@ -369,7 +369,7 @@ sets the maximum number of entries in the memory pool used for fragment reassembly (generated by .Ar scrub rules) to 20000. -Finally, +Using .Bd -literal -offset indent set limit src-nodes 2000 .Ed @@ -380,8 +380,18 @@ source IP addresses (generated by the and .Ar source-track options) to 2000. +Using +.Bd -literal -offset indent +set limit tables 1000 +set limit table-entries 100000 +.Ed +.Pp +sets limits on the memory pools used by tables. +The first limits the number of tables that can exist to 1000. +The second limits the overall number of addresses that can be stored +in tables to 100000. .Pp -These can be combined: +Various limits can be combined on a single line: .Bd -literal -offset indent set limit { states 20000, frags 20000, src-nodes 2000 } .Ed -- cgit v1.2.3