Hello, everyone
I found there's a const IPSTATE_MAX defined as 4013 in ip_state.h.
So the total number of ipf state shouldn't exceed 4013, that is, when I
use ipfstat -s, the active state should be less than 4013. Is it true?
I think 4013 is not a number large enough for state. I installed ipfilter
on a freebsd box as the firewall of our lab, but the total connections are
much more than 4013. Does anyone tell me how I can resolve the problem.
Much thanks.
Alex
--