-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Darren Reed wrote:
| Spooky wrote:
| | Darren,
| | ...
| | > I'm really quite puzzled by this...
| |
| | Hopefully you mean by my problem and not my hamfisted attempt at a
question ;)
|
| Yes...
|
| | I threw together another test machine this morning on the off chance
that it was some other sysctl settings that I had entered that were
throwing it off. The new machine is a clean install of FreeBSD 7.2
Release, it's running IP Filter v4.1.24 (404).
|
| I'll download it and see if I can see the same problem.
There's another timeout that is missing from that tunable list:
fr_tcptimewait.
This change is already present in 4.1.33.
Darren
- --- usr/src/sys/contrib/ipfilter/netinet/fil.c.orig 2009-04-14
20:14:26.000000000 -0700
+++ usr/src/sys/contrib/ipfilter/netinet/fil.c 2009-11-11
09:35:46.000000000 -0800
@@ -5998,6 +5998,8 @@
~ sizeof(fr_tcpclosed), IPFT_WRDISABLED,
NULL },
~ { { &fr_tcphalfclosed }, "fr_tcphalfclosed", 1, 0x7fffffff,
~ sizeof(fr_tcphalfclosed), IPFT_WRDISABLED,
NULL },
+ { { &fr_tcptimewait }, "fr_tcptimewait", 1, 0x7fffffff,
+ sizeof(fr_tcptimewait), IPFT_WRDISABLED,
NULL },
~ { { &fr_udptimeout }, "fr_udptimeout", 1, 0x7fffffff,
~ sizeof(fr_udptimeout), IPFT_WRDISABLED,
NULL },
~ { { &fr_udpacktimeout }, "fr_udpacktimeout", 1, 0x7fffffff,
- --- usr/src/sys/contrib/ipfilter/netinet/ip_state.h.orig
2009-04-14 20:14:26.000000000 -0700
+++ usr/src/sys/contrib/ipfilter/netinet/ip_state.h 2009-11-11
09:43:26.000000000 -0800
@@ -223,6 +223,7 @@
~ extern u_long fr_tcplastack;
~ extern u_long fr_tcptimeout;
~ extern u_long fr_tcpclosed;
+extern u_long fr_tcptimewait;
~ extern u_long fr_tcphalfclosed;
~ extern u_long fr_udptimeout;
~ extern u_long fr_udpacktimeout;
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iEYEARECAAYFAkr6+ZAACgkQP7JIXtvLbFXFKgCcC9vLMZwBMsy3s2zrPQeEh2KV
3QQAn3VsbzFRl2ETF1eo0/qg7ZmMPiZs
=MDV9
-----END PGP SIGNATURE-----
