Date: Thu, 3 Oct 2002 10:07:25 +0200 From: Aragon Gouveia <aragon@phat.za.net> To: freebsd-security@freebsd.org Subject: ipfw failing to "check-state" Message-ID: <20021003080725.GF46789@phat.za.net>
next in thread | raw e-mail | index | archive | help
Hi, I've recently installed 4.7-RC from sources. I'm having difficulty getting dynamic rules working with ipfw. Here is the output from 'ipfw -d show' : 00100 0 0 check-state 01000 574 354032 allow tcp from any to 66.8.x.y 25 keep-state setup 65535 11589448 7623002626 allow ip from any to any ## Dynamic rules: 01000 397 312298 (T 299, slot 77) <-> tcp, 66.8.x.y 32145<-> 66.8.x.y 25 01000 13 572 (T 297, slot 97) <-> tcp, 196.26.x.y 1781<-> 66.8.x.y 25 01000 5 216 (T 297, slot 187) <-> tcp, 196.36.x.y 1525<-> 66.8.x.y 25 01000 21 1566 (T 299, slot 196) <-> tcp, 66.8.x.y 3794<-> 66.8.x.y 25 As can be seen above, no traffic is matching rule 100 as it should. If it weren't for my default allow rule, smtp connections would not work to the machine specified in rule 1000. I'm using IPFW1, not IPFW2. I posted to questions@ yesterday but have received no response so far. This looks very much like an ipfw bug but I wanted to confirm it here before PR'ing. Has anyone else experienced this? Thanks, Aragon To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20021003080725.GF46789>