pf.conf.5: sync documentation with code on the matter of max state limit behavior
ClosedPublic
Actions

Authored by kp on Oct 4 2024, 12:44 PM.

Details

Reviewers

None

Group Reviewers

network
pfsense

Commits

rGd01949e8a210: pf.conf.5: sync documentation with code on the matter of max state limit…

Summary

When one of the state limits is reached, further packets that would
create state are dropped, until existing states time out. Discussed
with mcbride, ok henning, jmc

Obtained from: OpenBSD, mikeb <mikeb@openbsd.org>, 677ed08ce1
Sponsored by: Rubicon Communications, LLC ("Netgate")

Diff Detail

Repository

rG FreeBSD src repository

Lint

Lint Not Applicable

Unit

Tests Not Applicable

Event Timeline

kp created this revision.Oct 4 2024, 12:44 PM

Herald added a subscriber: imp. · View Herald TranscriptOct 4 2024, 12:44 PM

kp requested review of this revision.Oct 4 2024, 12:44 PM

Harbormaster completed remote builds in B59745: Diff 144234.Oct 4 2024, 12:44 PM

kp added a parent revision: D46931: pf: remove the last hand-rolled IPv6 extension header loop.Oct 4 2024, 12:44 PM

kp added a child revision: D46933: pfctl: avoid possible SIGSEGV when wrong tos option.

This revision was not accepted when it landed; it landed in state Needs Review.Oct 10 2024, 12:38 PM

Closed by commit rGd01949e8a210: pf.conf.5: sync documentation with code on the matter of max state limit… (authored by kp). · Explain Why

This revision was automatically updated to reflect the committed changes.

kp added a commit: rGd01949e8a210: pf.conf.5: sync documentation with code on the matter of max state limit….

Revision Contents
Changeset List

Path

Size

share/

man/

man5/

pf.conf.5

7 lines

Diff 144582

View Options

pf.conf.5: sync documentation with code on the matter of max state limit behaviorClosedPublicActions