[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [FW1] More Memory for FW1 Kernel
[ The following text is in the "iso-8859-1" character set. ]
[ Your display is set for the "US-ASCII" character set. ]
[ Some characters may be displayed incorrectly. ]
> At 12:45 AM 4/22/99 -0700, Dameon D. Welch wrote:
> >The kernel memory FireWall-1 uses (as defined by the fwhmem parameter) is
> >only used to store the various tables used in the enforcement of your
> >security policy. This memory is hard-wired (i.e. it can not be swapped
> >so it is very important the size is chosen correctly so as to not deprive
> >your box of memory unnecessarily.Over time, I have concluded that when a
> >change in fwhmem is needed, 5 megabytes is a good place to start.
> I interpret this to mean that not enough fwmem is bad.
This is correct.
> If I bump fwmem up
> to say 12 meg (because I have plenty of memory sticks in my box), could
> this be a bad thing even though I never use it all? Basically what I'm
> asking is if too much fwmem could be bad.
On a heavily loaded system or a system with limited physical memory, yes.
Past a certain point, the extra kernel memory would be useless anyway unless
you made changes to the number of connections that FireWall-1 can handle.
To unsubscribe from this mailing list, please see the instructions at