Re: ipfw dynamic rules

From: Simon L. Nielsen (none@simon--nitro.dk.lh.bsd-dk.dk)
Date: Tue 09 Oct 2001 - 22:49:54 CEST

Next message: Søren Andreasen: "Router"
Previous message: Martin-Legène, Robert: "RE: ipfw dynamic rules"
In reply to: Sidsel Jensen: "ipfw dynamic rules"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
Mail actions: [ respond to this message ] [ mail a new topic ]

From: "Simon L. Nielsen" <none@simon--nitro.dk.lh.bsd-dk.dk>
To: bsd-dk@bsd-dk.dk
Subject: Re: ipfw dynamic rules
Date: Tue, 9 Oct 2001 22:49:54 +0200

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Tuesday 09 October 2001 22:44, Sidsel wrote:

> 1) Kan man forøge tiden en dynamisk regel lever og i så fald hvordan?
> (Mine brugere brokker sig over at dere fcsking MSN Messenger timer ud)
Se på net.inet.ip.fw.dyn_ack_lifetime og de "lignende".. prøv at søg efter
den i 'man ipfw'. Præcis hvilken en af de forskellige lifetime sysctl's du
skal have fat på ved jeg ikke lige..

> 2) Hvor sætter man grænsen for hvor mange dynamiske regler, som er tilladt
> ? (Nogle gange kommer min firewall og siger "too many dynamic rules")
Fra man ipfw
net.inet.ip.fw.dyn_max: 1000
Maximum number of dynamic rules. When you hit this limit, no
more dynamic rules can be installed until old ones expire.

Håber det hjælper.

- --
/Simon
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (FreeBSD)
Comment: For info see http://www.gnupg.org

iD8DBQE7w2Ly8kocFXgPTRwRAhiHAKDA4RpKNy35PV0icAMw8kGEod121wCfUPXr
hsBOoSzcNeIeNJzD4T4N4Dc=
=lqzi
-----END PGP SIGNATURE-----

Next message: Søren Andreasen: "Router"
Previous message: Martin-Legène, Robert: "RE: ipfw dynamic rules"
In reply to: Sidsel Jensen: "ipfw dynamic rules"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
Mail actions: [ respond to this message ] [ mail a new topic ]

This archive was generated by hypermail 2b30 : Wed 15 Nov 2006 - 18:24:16 CET