Re: limited number if iptable rules on 64bit hosts

["Bill Rugolsky Jr." <brugolsky@xxxxxxxxxxxxxxxxxxxxxxxxx>]

On Wed, Feb 02, 2005 at 11:25:16PM +0100, Olaf Hering wrote:
> it triggers the first -ENOMEM in
> net/ipv4/netfilter/ip_tables.c:do_replace
> 
> sizeof(struct ipt_table_info)+SMP_ALIGN(tmp.size)*NR_CPUS == 67108992 bytes
> 
> 128+524288*128==67108992
> 
> (sizeof(struct ipt_table_info) + (((tmp.size) + (1 << 7)-1) & ~((1 << 7)-1)) 
> * 128)
> 
> hmm, no braces missing.

I don't have time to look now [I'm running for the door],
but that's possibly the vmalloc() limit of 64M (67108864) ?

Regards,

        Bill Rugolsky