From owner-freebsd-current@FreeBSD.ORG Sat Nov 12 03:47:54 2005 Return-Path: X-Original-To: current@freebsd.org Delivered-To: freebsd-current@FreeBSD.ORG Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id B69C516A42F for ; Sat, 12 Nov 2005 03:47:54 +0000 (GMT) (envelope-from PeterJeremy@optushome.com.au) Received: from mail26.syd.optusnet.com.au (mail26.syd.optusnet.com.au [211.29.133.167]) by mx1.FreeBSD.org (Postfix) with ESMTP id 1120E43D45 for ; Sat, 12 Nov 2005 03:47:53 +0000 (GMT) (envelope-from PeterJeremy@optushome.com.au) Received: from cirb503493.alcatel.com.au (c220-239-19-236.belrs4.nsw.optusnet.com.au [220.239.19.236]) by mail26.syd.optusnet.com.au (8.12.11/8.12.11) with ESMTP id jAC3loMs024956 (version=TLSv1/SSLv3 cipher=EDH-RSA-DES-CBC3-SHA bits=168 verify=NO); Sat, 12 Nov 2005 14:47:51 +1100 Received: from cirb503493.alcatel.com.au (localhost.alcatel.com.au [127.0.0.1]) by cirb503493.alcatel.com.au (8.12.10/8.12.10) with ESMTP id jAC3loHh086722; Sat, 12 Nov 2005 14:47:50 +1100 (EST) (envelope-from pjeremy@cirb503493.alcatel.com.au) Received: (from pjeremy@localhost) by cirb503493.alcatel.com.au (8.12.10/8.12.9/Submit) id jAC3lobT086721; Sat, 12 Nov 2005 14:47:50 +1100 (EST) (envelope-from pjeremy) Date: Sat, 12 Nov 2005 14:47:50 +1100 From: Peter Jeremy To: Sean McNeil Message-ID: <20051112034750.GC39882@cirb503493.alcatel.com.au> References: <1131755730.6959.7.camel@triton.mcneil.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <1131755730.6959.7.camel@triton.mcneil.com> User-Agent: Mutt/1.4.2.1i X-PGP-Key: http://members.optusnet.com.au/peterjeremy/pubkey.asc Cc: current@freebsd.org Subject: Re: verrevpath failure from within my own box X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 12 Nov 2005 03:47:54 -0000 On Fri, 2005-Nov-11 16:35:30 -0800, Sean McNeil wrote: >00300 28 2177 deny ip from any to any not verrevpath in via dc0 > >as you can see, there are some packets that were denied. I can >reproduce this with nautilus by simply browsing network:///. How about you add a 'log' to that rule and see exactly what is matching. That may provide a clue to you, or someone on this list, as to what is not behaving as expected. -- Peter Jeremy