CVSROOT: /cvs Module name: src Changes by: cami...@cvs.openbsd.org 2012/09/20 03:43:49
Modified files:
sys/net : pf_ioctl.c pfvar.h
share/man/man5 : pf.conf.5
Log message:
Lower pf frags limit to not risk running out of mbuf clusters
when dealing with lots of IP fragments.
This sets the default to 25% of the mbuf cluster maximum (hint
from beck). And the example in the manpage is sane now.
ok mikeb henning beck deraadt
