From 55a1435e45b0ce2d0745e3b3c46513694915a88d Mon Sep 17 00:00:00 2001
From: jim-p <jimp@pfsense.org>
Date: Thu, 18 Jun 2015 09:33:36 -0400
Subject: Add a GUI field to increase the pf frag entries limit. Fixes ticket
 #4775

---
 etc/inc/filter.inc | 5 +++++
 1 file changed, 5 insertions(+)

(limited to 'etc')

diff --git a/etc/inc/filter.inc b/etc/inc/filter.inc
index 2dc5234..ec65bad 100644
--- a/etc/inc/filter.inc
+++ b/etc/inc/filter.inc
@@ -377,6 +377,11 @@ function filter_configure_sync($delete_states_if_needed = true) {
 		$limitrules .= "set limit src-nodes {$max_states}\n";
 	}
 
+	/* Frag limit. pf default is 5000 */
+	if ($config['system']['maximumfrags'] <> "" && is_numeric($config['system']['maximumfrags'])) {
+		$limitrules .= "set limit frags {$config['system']['maximumfrags']}\n";
+	}
+
 	if (isset($config['system']['lb_use_sticky']) && is_numeric($config['system']['srctrack']) && ($config['system']['srctrack'] > 0)) {
 		$limitrules .= "set timeout src.track {$config['system']['srctrack']}\n";
 	}
-- 
cgit v1.1