PFR_KENTRY_HIWAT
{ &pfr_kentry_pl, PFR_KENTRY_HIWAT }
pf->limit[PF_LIMIT_TABLE_ENTRIES] = PFR_KENTRY_HIWAT;