From owner-freebsd-ipfw@FreeBSD.ORG Fri Jul 1 09:23:57 2005 Return-Path: X-Original-To: freebsd-ipfw@freebsd.org Delivered-To: freebsd-ipfw@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id EC14216A41F for ; Fri, 1 Jul 2005 09:23:57 +0000 (GMT) (envelope-from dmitry.mityugov@gmail.com) Received: from wproxy.gmail.com (wproxy.gmail.com [64.233.184.196]) by mx1.FreeBSD.org (Postfix) with ESMTP id 9385C43D1F for ; Fri, 1 Jul 2005 09:23:57 +0000 (GMT) (envelope-from dmitry.mityugov@gmail.com) Received: by wproxy.gmail.com with SMTP id i4so277891wra for ; Fri, 01 Jul 2005 02:23:57 -0700 (PDT) DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:reply-to:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=c0Ru/mR7WYbfyMhLyBZPbR/NhHmh9uLNwbPmkbCMGhcRJ5WrZv/S0DaR/xGw3XA+ftpAdrpwRpioaWbR6ricB9iRJqvmx6aIrXYxmu7a/Jjy/cUHORY/pyleByYI9IIU1k7ONyM+S/x7ftxbOiefUmWC8Mm3F1Z2OdrlZjnYWvs= Received: by 10.54.45.21 with SMTP id s21mr1283535wrs; Fri, 01 Jul 2005 02:23:56 -0700 (PDT) Received: by 10.54.56.33 with HTTP; Fri, 1 Jul 2005 02:23:56 -0700 (PDT) Message-ID: Date: Fri, 1 Jul 2005 13:23:56 +0400 From: Dmitry Mityugov To: fbsd_user@a1poweruser.com In-Reply-To: Mime-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Content-Disposition: inline References: Cc: "Freebsd-Ipfw@Freebsd. Org" , "freebsd-questions@FreeBSD. ORG" Subject: Re: ipfw2 and clearing a rules state table records X-BeenThere: freebsd-ipfw@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: Dmitry Mityugov List-Id: IPFW Technical Discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 01 Jul 2005 09:23:58 -0000 On 7/1/05, fbsd_user wrote: > Is there a way in 5.4 ipfw2 to reset/delete/clear a stateful rule's recor= ds > in the state table? Never tried this myself, but probably by temporarily lowering net.inet.ip.fw.dyn_*_lifetime? --=20 Dmitry "We live less by imagination than despite it" - Rockwell Kent, "N by E"