From owner-freebsd-questions@FreeBSD.ORG Wed Sep 17 17:54:32 2003 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 4D0F616A4B3 for ; Wed, 17 Sep 2003 17:54:32 -0700 (PDT) Received: from ns1.tcbug.org (12-218-40-24.client.mchsi.com [12.218.40.24]) by mx1.FreeBSD.org (Postfix) with ESMTP id AC32B43FB1 for ; Wed, 17 Sep 2003 17:54:31 -0700 (PDT) (envelope-from friar_josh@tcbug.org) Received: by ns1.tcbug.org (Postfix, from userid 1012) id 2A2E6B270; Wed, 17 Sep 2003 19:53:03 -0500 (CDT) Date: Wed, 17 Sep 2003 19:53:03 -0500 From: Josh Paetzel To: Mark Message-ID: <20030918005303.GJ27665@tcbug.org> References: <200309180021.H8I0LW3P072727@asarian-host.net> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <200309180021.H8I0LW3P072727@asarian-host.net> User-Agent: Mutt/1.5.4i cc: freebsd-questions@freebsd.org Subject: Re: Ipfw on the fritz? X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 18 Sep 2003 00:54:32 -0000 On Thu, Sep 18, 2003 at 12:21:58AM +0000, Mark wrote: > Eek, I just got these eery messages in /var/log/messages: > > Sep 18 02:00:18 asarian-host /kernel: OUCH! cannot remove rule, count 1 > Sep 18 02:00:18 asarian-host /kernel: OUCH! cannot remove rule, count 1 > Sep 18 02:00:18 asarian-host /kernel: OUCH! cannot remove rule, count 2 > Sep 18 02:00:18 asarian-host /kernel: OUCH! cannot remove rule, count 2 > Sep 18 02:00:18 asarian-host /kernel: OUCH! cannot remove rule, count 1 > Sep 18 02:00:18 asarian-host /kernel: OUCH! cannot remove rule, count 1 > > That does not look good. :( I run FreeBSD 4.7R. Today I added a few rules > using "limit src-addr". Could that be it? And what does it mean? Are some > rules broken after this? I never had this happen before. Why would ipfw even > want to remove rules? > > Baffled & Concerned, > > - Mark > The following thread may be of interest to you: http://lists.freebsd.org/pipermail/freebsd-ipfw/2003-June/000215.html Josh Paetzel