From owner-freebsd-ipfw@FreeBSD.ORG Wed Dec 28 23:18:53 2011 Return-Path: Delivered-To: freebsd-ipfw@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 34CBF106566B; Wed, 28 Dec 2011 23:18:53 +0000 (UTC) (envelope-from alancyang@gmail.com) Received: from mail-ww0-f50.google.com (mail-ww0-f50.google.com [74.125.82.50]) by mx1.freebsd.org (Postfix) with ESMTP id 61F9F8FC12; Wed, 28 Dec 2011 23:18:52 +0000 (UTC) Received: by wgbdr11 with SMTP id dr11so22591837wgb.31 for ; Wed, 28 Dec 2011 15:18:51 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type:content-transfer-encoding; bh=v6lQyIQcad3dwkzO6BnbcG/VTvXnHzwMXMmXmq8+6CA=; b=ECT0mu15dxmtiUF+VWhyx8RB1tuwFWBEOvMYPV+sncHyRoceVp9Brp6AhejNU8PWHW vU/H+MGSmVfsS9GNjxV0WYai247LQfDYiBjMi6HFwvpAsF/ZNLxEf1xcHzG4lKTf5UC3 Ytft3hzkT4BoNyorTpr8pQ5+e0d8DWvdBu4rw= MIME-Version: 1.0 Received: by 10.227.60.68 with SMTP id o4mr4565833wbh.22.1325114331314; Wed, 28 Dec 2011 15:18:51 -0800 (PST) Received: by 10.216.167.13 with HTTP; Wed, 28 Dec 2011 15:18:51 -0800 (PST) In-Reply-To: References: <4EDE2739.1040104@FreeBSD.org> <20111208132002.R16498@sola.nimnet.asn.au> <20111209021345.Y11090@sola.nimnet.asn.au> <20111220153458.I64681@sola.nimnet.asn.au> Date: Wed, 28 Dec 2011 15:18:51 -0800 Message-ID: From: alan yang To: freebsd-ipfw@freebsd.org Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Cc: Ian Smith , araujo@freebsd.org, Sergey Matveychuk Subject: Re: ipfw dscp support X-BeenThere: freebsd-ipfw@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: IPFW Technical Discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 28 Dec 2011 23:18:53 -0000 > > reading ipfw-classifyd divert socket sendto() with packet sin_port set > to flow->if_fwrule (ftp =3D=3D 1000 for instance), was expecting ipfw > would continue with next rule which is 1010 in above. =A0But ipfw seems > to have continue with matching rule 500. > with further looking, divert and ipfw rule processing work as documented in man page. sorry about above confusion.