Tuning (cont)

If packets are blocked because of the "log-or-blocked" rule, you can first try increasing IPLLOGSIZE in ip_fil.h.
For NAT, increase NAT_SIZE and RDR_SIZE fro large networks. This is described in ip_nat.h.

If packets are blocked because of the "log-or-blocked" rule, you can first try increasing IPLLOGSIZE in ip_fil.h.