On Tue, Feb 22, 2011 at 1:06 PM, Patrick Lamaiziere <patf...@davenulle.org> wrote: >> https://calomel.org/network_performance.html > > Yes thanks. I've already increase the size of the > net.inet.ip.ifq.maxlen. > > But I don't see the point of these tunings for a firewall. IMHO, it > could help for a host handling tcp/udp connection.
Wow, you're like the first person ever to realize that. I'm serious. I wish more people would at least try to think about what they're doing before they go twisting every dial they can find because the internet said so. Sorry I can't give you much useful help, but ignoring the calomel crap is a great start.