Re: size of tables in pf?

lrutledge wrote:

>>===== Original Message From Chuck Yerkes <chuck@snew.com> =====
It's only a security vulnerability if your security depend of the table being loaded and you don't check pfctl return value like:

   pfctl -t blacklist -Ta -f filetoobig.ips

If filetoobig is too big, none of the addresses will be loaded, leaving you with an empty blacklist.

Otherwise, of course, you can shoot yourself in the foot by wasting all the memory available with a huge table. But there is tons of other ways of doing that without using tables. If you are root, of course.
Cedric Received on Wed Jun 18 12:27:12 2003