From owner-freebsd-questions@FreeBSD.ORG Sat Nov 26 15:18:58 2005 Return-Path: X-Original-To: questions@FreeBSD.ORG Delivered-To: freebsd-questions@FreeBSD.ORG Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 7A94E16A42D for ; Sat, 26 Nov 2005 15:18:58 +0000 (GMT) (envelope-from freebsd-questions-local@be-well.ilk.org) Received: from mail26.sea5.speakeasy.net (mail26.sea5.speakeasy.net [69.17.117.28]) by mx1.FreeBSD.org (Postfix) with ESMTP id C068C43D70 for ; Sat, 26 Nov 2005 15:18:45 +0000 (GMT) (envelope-from freebsd-questions-local@be-well.ilk.org) Received: (qmail 5166 invoked from network); 26 Nov 2005 15:18:42 -0000 Received: from dsl092-078-145.bos1.dsl.speakeasy.net (HELO be-well.ilk.org) ([66.92.78.145]) (envelope-sender ) by mail26.sea5.speakeasy.net (qmail-ldap-1.03) with SMTP for ; 26 Nov 2005 15:18:42 -0000 Received: by be-well.ilk.org (Postfix, from userid 1147) id 7E4802841D; Sat, 26 Nov 2005 10:18:41 -0500 (EST) Sender: lowell@be-well.ilk.org To: Mark Edwards References: <536B393F-0E66-4B10-89A7-E0D4D82C87D7@antsclimbtree.com> From: Lowell Gilbert Date: 26 Nov 2005 10:18:41 -0500 In-Reply-To: <536B393F-0E66-4B10-89A7-E0D4D82C87D7@antsclimbtree.com> Message-ID: <44sltjphda.fsf@be-well.ilk.org> Lines: 21 User-Agent: Gnus/5.09 (Gnus v5.9.0) Emacs/21.3 MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Cc: questions@FreeBSD.ORG Subject: Re: verrevpath -- ipfw: unknown argument ``not'' X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: questions@FreeBSD.ORG List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 26 Nov 2005 15:18:58 -0000 Mark Edwards writes: > I am trying to implement the verrevpath suggestion in the ipfw man > page, as follows: > > > The verrevpath option could be used to do automated anti- > > spoofing by > > adding the following to the top of a ruleset: > > > > ipfw add deny ip from any to any not verrevpath in > > However, when I try to add the rule, I get an error: > > > lilbuddy:~ paimin$ ipfw add deny ip from any to any not verrevpath in > > ipfw: unknown argument ``not'' > > Can someone tell what is causing this syntax to fail? Thanks! Works fine for me right now on -STABLE (RELENG_6). You didn't mention what you were running, so there's not much else we can tell you.