Darren Reed <darrenr@reed.wattle.id.au> writes:

> > Isn't it a hash table of some sort?
> 
> What it's stored in is immaterial, really.  It should be created when ipf
> is enabled and destroyed when disabled.  In between, why should the size
> be fixed ?

It's not trivial to grow a hash table, is it?

> echo 'block in on fxp0 proto 4 from any to any' | ipf -nvf -

Ahh, thanks.  Sorry about (3) then :)

--Michael