summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorChris Buechler <cmb@pfsense.org>2010-09-02 03:09:43 -0400
committerChris Buechler <cmb@pfsense.org>2010-09-02 03:09:43 -0400
commit00710912fca85aaa06921d34293e0462a989766c (patch)
treebc0cafb21e33fd333198ee7a4f965ddcf5772055
parent4c4be113e0dbaa12151298065be01873f5bc9d34 (diff)
downloadpfsense-00710912fca85aaa06921d34293e0462a989766c.zip
pfsense-00710912fca85aaa06921d34293e0462a989766c.tar.gz
keep src-nodes the same as states, as it is by default. in some circumstances this can limit per-host connections
-rw-r--r--etc/inc/filter.inc2
1 files changed, 2 insertions, 0 deletions
diff --git a/etc/inc/filter.inc b/etc/inc/filter.inc
index faa99da..5384b2a 100644
--- a/etc/inc/filter.inc
+++ b/etc/inc/filter.inc
@@ -255,9 +255,11 @@ function filter_configure_sync() {
if($config['system']['maximumstates'] <> "" && is_numeric($config['system']['maximumstates'])) {
/* User defined maximum states in Advanced menu. */
$rules .= "set limit states {$config['system']['maximumstates']}\n";
+ $rules .= "set limit src-nodes {$config['system']['maximumstates']}\n";
} else {
$max_states = pfsense_default_state_size();
$rules .= "set limit states {$max_states}\n";
+ $rules .= "set limit src-nodes {$max_states}\n";
}
if($config['system']['maximumtableentries'] <> "" && is_numeric($config['system']['maximumtableentries'])) {
OpenPOWER on IntegriCloud