From owner-freebsd-questions@FreeBSD.ORG  Fri May  5 00:58:01 2006
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
X-Original-To: freebsd-questions@freebsd.org
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 2467916A400
	for <freebsd-questions@freebsd.org>;
	Fri,  5 May 2006 00:58:01 +0000 (UTC)
	(envelope-from dennisolvany@gmail.com)
Received: from wr-out-0506.google.com (wr-out-0506.google.com [64.233.184.236])
	by mx1.FreeBSD.org (Postfix) with ESMTP id AA77543D4C
	for <freebsd-questions@freebsd.org>;
	Fri,  5 May 2006 00:58:00 +0000 (GMT)
	(envelope-from dennisolvany@gmail.com)
Received: by wr-out-0506.google.com with SMTP id 69so441828wra
	for <freebsd-questions@freebsd.org>;
	Thu, 04 May 2006 17:58:00 -0700 (PDT)
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com;
	h=received:message-id:date:from:user-agent:mime-version:to:subject:references:in-reply-to:content-type:content-transfer-encoding;
	b=N2ldlM4dO3l9s9pPFYvAtkmpkSX4Cvd418temRZFI0JqD+gBlKhdS1Yx6r0s82T4Z+C2TsorswqO3VMzHWYydgOY/QtVeOF1+PtWeH1VglZDwTxzpkgOPrT/l2WzT19TzxLKil1OM68Uoym8gVXpTAy0LJ9SgVzA90ocDbuK5ic=
Received: by 10.54.84.14 with SMTP id h14mr432386wrb;
	Thu, 04 May 2006 17:58:00 -0700 (PDT)
Received: from ?195.16.87.34? ( [67.102.60.210])
	by mx.gmail.com with ESMTP id 13sm313335wrl.2006.05.04.17.57.59;
	Thu, 04 May 2006 17:57:59 -0700 (PDT)
Message-ID: <445AA316.6040602@gmail.com>
Date: Thu, 04 May 2006 19:57:58 -0500
From: Dennis Olvany <dennisolvany@gmail.com>
User-Agent: Thunderbird 1.5 (X11/20060211)
MIME-Version: 1.0
To: freebsd-questions@freebsd.org
References: <445A99B9.9020100@gmail.com>
In-Reply-To: <445A99B9.9020100@gmail.com>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Subject: Re: ipfw: denied frags
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Fri, 05 May 2006 00:58:01 -0000

Dennis Olvany wrote:
> May  4 19:06:02 b1 kernel: ipfw: 10600 Deny UDP 195.16.84.250 
> 192.168.102.10 in via ste0 (frag 33624:67@1480)

I see. The frags don't contain ports and therefore do not match the 
dynamic rule. A static rule took care of it.