Once again I have been blind sided by yet another conservative out-of-the-box setting. IPFilter is tuned way too conservative with it’s state table size. Here is how you can tell if your hitting any issues, run ipfstat and check for lost packets. victori@opensolaris:~# ipfstat | grep lost fragment state(in): kept 0 lost 0 not fragmented […]