Re: pf skip step optimization

[Henning Brauer <lists-openbsd_(_at_)_bsws_(_dot_)_de>]

On Tue, Jul 23, 2002 at 08:55:12PM -0700, Paul B. Henson wrote:
> Are you saying that the
> automatic skip step optimization is simpler and hence less prone to error
> than a manual nesting implementation?

at least I say that.

> if I recall correctly, the person who implemented the system you describe
> indicated he back ported chunks of -current pf into his own -stable tree?

it's well known that I am sick ;-)
actually that was 3.0-stable (and the machine still runs that). I needed
some things from this times -current pf, but that's all in 3.1.

> Was that pre or post release of 3.1? 

pre.

> In
> 3.1 I don't think there's any way to limit the amount of memory used by the
> scrub directive?

there is, see pfctl -l (in -current: set limit in pf.conf)