Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 13 Nov 2003 11:47:17 +0100
From:      Wiktor Niesiobedzki <bsd@w.evip.pl>
To:        freebsd-ipfw@freebsd.org
Subject:   Uid keyword matches only on loopack interface
Message-ID:  <20031113104717.GK231@mail.evip.pl>

next in thread | raw e-mail | index | archive | help
Hi,

After setting my firewall I saw that only few packets match the uid keyword.
>From my trival test came out that only loopack traffic can be matched. Is
there some bug lying in here?

The simple rule:
00395      0       0 count log tcp from any to any uid root

Will match only:
Nov 13 11:41:23 portal kernel: ipfw: 395 Count TCP 127.0.0.1:80
127.0.0.1:50780 out via lo0
Nov 13 11:41:23 portal kernel: ipfw: 395 Count TCP 127.0.0.1:50780
127.0.0.1:80 in via lo0
Nov 13 11:41:25 portal kernel: ipfw: 395 Count TCP 127.0.0.1:50780
127.0.0.1:80 out via lo0

That kind of traffic. Any traffic going by other interface is not counted.

uname -a
FreeBSD portal 5.1-CURRENT FreeBSD 5.1-CURRENT #1: Tue Nov 11 10:15:12 CET
2003     root@portal:/home/usr/obj/home/usr/src/sys/PORTAL  i386

/sys/netinet/ip_fw2.c:
     $FreeBSD: src/sys/netinet/ip_fw2.c,v 1.43 2003/11/07 23:26:57 sam Exp $


Cheers,

Wiktor Niesiobedzki



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20031113104717.GK231>