Eugene Grosbein 47cb0632e8 ipfw: unbreak matching with big table type flow. ... Test case: # n=32769 # ipfw -q table 1 create type flow:proto,dst-ip,dst-port # jot -w 'table 1 add tcp,127.0.0.1,' $n 1 | ipfw -q /dev/stdin # ipfw -q add 5 unreach filter-prohib flow 'table(1)' The rule 5 matches nothing without the fix if n>=32769. With the fix, it works: # telnet localhost 10001 Trying 127.0.0.1... telnet: connect to address 127.0.0.1: Permission denied telnet: Unable to connect to remote host MFC after: 2 weeks Discussed with: ae, melifaro		2020-06-04 14:15:39 +00:00
..
ipfw	ipfw: unbreak matching with big table type flow.	2020-06-04 14:15:39 +00:00
pf	pf: Add a new zone for per-table entry counters.	2020-05-16 00:28:12 +00:00