Re: IPNat Stops routing

Ryan Beasley wrote:
> Unlike the state table, there's no compiled limit on the
> size of the NAT table. You're limited only by the amount
> of memory available to the kernel.

eh?

(ronin)$ pwd
/ronin/home0/jds/tools/ipf/ip_fil3.4.31
(ronin)$ grep NAT_TABLE_SZ *
ip_nat.c:u_int ipf_nattable_sz = NAT_TABLE_SZ;
ip_nat.h:#ifndef NAT_TABLE_SZ
ip_nat.h:# define NAT_TABLE_SZ 127
ip_nat.h:#undef NAT_TABLE_SZ
ip_nat.h:#define NAT_TABLE_SZ 16383

note:
NAT_TABLE_SZ = 16383 only when LARGE_NAT is defined; otherwise,
NAT_TABLE_SZ = 127, which generally isn't enough.

i'd say change NAT_TABLE_SZ and recompile. ps, under solaris
you can change this parameter (and others) at boot time via
/etc/system. for more info see my entry here:
http://www.phildev.net/ipf/IPFsolaris.html#10

there may be a similar way to do this under *bsd, ioctl perhaps?

jim