diff options
| author | jim-p <jimp@pfsense.org> | 2015-06-18 09:33:36 -0400 |
|---|---|---|
| committer | jim-p <jimp@pfsense.org> | 2015-06-18 09:33:36 -0400 |
| commit | 55a1435e45b0ce2d0745e3b3c46513694915a88d (patch) | |
| tree | a2740371f6e55ce9a082a1260fced276d47c5208 /etc | |
| parent | 41e9efe66791e0981d85b7b2b4c5e409b5b1e863 (diff) | |
| download | pfsense-55a1435e45b0ce2d0745e3b3c46513694915a88d.zip pfsense-55a1435e45b0ce2d0745e3b3c46513694915a88d.tar.gz | |
Add a GUI field to increase the pf frag entries limit. Fixes ticket #4775
Diffstat (limited to 'etc')
| -rw-r--r-- | etc/inc/filter.inc | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/etc/inc/filter.inc b/etc/inc/filter.inc index 2dc5234..ec65bad 100644 --- a/etc/inc/filter.inc +++ b/etc/inc/filter.inc @@ -377,6 +377,11 @@ function filter_configure_sync($delete_states_if_needed = true) { $limitrules .= "set limit src-nodes {$max_states}\n"; } + /* Frag limit. pf default is 5000 */ + if ($config['system']['maximumfrags'] <> "" && is_numeric($config['system']['maximumfrags'])) { + $limitrules .= "set limit frags {$config['system']['maximumfrags']}\n"; + } + if (isset($config['system']['lb_use_sticky']) && is_numeric($config['system']['srctrack']) && ($config['system']['srctrack'] > 0)) { $limitrules .= "set timeout src.track {$config['system']['srctrack']}\n"; } |
