Re: size of state table on 3 legged machine

[Henning Brauer <lists-openbsd@bsws.de>]

On Tue, Jun 25, 2002 at 12:38:03PM +1000, Adrian Buxton wrote:
> It would seem that if using 3 or more interfaces this becomes a bit of a
> problem though, as you are no longer able to simply pass all on any of the
> interfaces if you want to maintain packet flow control across all networks.
> The only solution I am aware of is to use 2 keep state rules for rule of
> traffic. What effect does this have on the state table?? Is there another
> solution I am unaware of??

doubles the state table size. not a real problem in most setups, given pf's
extraordinary performance.