From owner-freebsd-net@FreeBSD.ORG  Thu Jul 29 20:41:32 2004
Return-Path: <owner-freebsd-net@FreeBSD.ORG>
Delivered-To: freebsd-net@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id ABB3116A4CE
	for <freebsd-net@freebsd.org>; Thu, 29 Jul 2004 20:41:32 +0000 (GMT)
Received: from shellma.zin.lublin.pl (shellma.zin.lublin.pl [212.182.126.68])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 6CCC343D41
	for <freebsd-net@freebsd.org>; Thu, 29 Jul 2004 20:41:27 +0000 (GMT)
	(envelope-from pawmal-posting@freebsd.lublin.pl)
Received: by shellma.zin.lublin.pl (Postfix, from userid 1018)
	id 729A83474C1; Thu, 29 Jul 2004 22:38:59 +0200 (CEST)
Date: Thu, 29 Jul 2004 22:38:59 +0200
From: Pawel Malachowski <pawmal-posting@freebsd.lublin.pl>
To: Jeremie Le Hen <jeremie.le-hen@epita.fr>
Message-ID: <20040729203859.GB12370@shellma.zin.lublin.pl>
References: <41081955.5090204@schluting.com>
	<20040728232352.GB8838@tuileries.epita.fr>
Mime-Version: 1.0
Content-Type: text/plain; charset=iso-8859-2
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
In-Reply-To: <20040728232352.GB8838@tuileries.epita.fr>
User-Agent: Mutt/1.4.2i
cc: freebsd-net@freebsd.org
Subject: Re: packet order, ipf or ipfw
X-BeenThere: freebsd-net@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Networking and TCP/IP with FreeBSD <freebsd-net.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-net>
List-Post: <mailto:freebsd-net@freebsd.org>
List-Help: <mailto:freebsd-net-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 29 Jul 2004 20:41:32 -0000

On Thu, Jul 29, 2004 at 01:23:52AM +0200, Jeremie Le Hen wrote:

> AFAIK, ipf takes precedence on ipfw for incoming packets on -STABLE,
> and this is of course symmetric for outgoing ones.

No, outgoing packets are passed through ipf/ipnat before they reach
ipfw (at least in STABLE, PR kern/46564).


-- 
Paweł Małachowski