Re: [FW1] More Memory for FW1 Kernel

[Dameon D. Welch <dwelch@hotmail.com>]

    [ The following text is in the "iso-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]


> At 12:45 AM 4/22/99 -0700, Dameon D. Welch wrote:
>
> >The kernel memory FireWall-1 uses (as defined by the fwhmem parameter) is
> >only used to store the various tables used in the enforcement of your
> >security policy. This memory is hard-wired (i.e. it can not be swapped
out),
> >so it is very important the size is chosen correctly so as to not deprive
> >your box of memory unnecessarily.Over time, I have concluded that when a
> >change in fwhmem is needed, 5 megabytes is a good place to start.
>
> I interpret this to mean that not enough fwmem is bad.

This is correct.

> If I bump fwmem up
> to say 12 meg (because I have plenty of memory sticks in my box), could
> this be a bad thing even though I never use it all?  Basically what I'm
> asking is if too much fwmem could be bad.

On a heavily loaded system or a system with limited physical memory, yes.
Past a certain point, the extra kernel memory would be useless anyway unless
you made changes to the number of connections that FireWall-1 can handle.

-- PhoneBoy


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================