Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 24 Feb 2000 11:28:41 -0600
From:      Gordon Grieder <grub@grub.net>
To:        Alexander Karptsov <karp@visti.net>
Cc:        freebsd-security@FreeBSD.ORG
Subject:   Re: mysterious behaviour of the ipfw ...
Message-ID:  <38B56A49.74D5C091@grub.net>
References:  <Pine.BSF.4.10.10002241850130.23104-100000@lab.visti.net>

next in thread | previous in thread | raw e-mail | index | archive | help
Alexander Karptsov wrote:
> 
>    Hi !
> 
> My perl script, which gets counters' statistics from "ipfw show |",
> mysteriously warns me from time to time. When I added debug mode to it
> I saw next (please note:  my ipfw begins with rule number 100
> and ip number 10/8):
[snip]


I'm just starting to look into this odd behaviour that has been
affecting a machine here for a couple of weeks, I wonder if it's related
to your problem.

FreeBSD 3.1-RELEASE (yeah, yeah) and IPFW.

ipfw show returns:
00100   0            0 allow ip from any to any via lo0
00000 127 858993459455 deny 161 from any to any
00000   0            0 deny ip from 0.0.0.0:103.102.181.56 to any


My rules are not showing up but are indeed in effect.  I have no idea
about this rule 00000 that should not be there.

Each time I show the status, the information for rule 00000 seems to
change.

5 pastes from 5 ipfw shows:
00000 127 858993459455 deny 233 from any to any
00000 127 858993459455 deny udp from any 0,0,0,0,0,0,0,0,0,0,0 to any
0,0,0,0,0,0,0,0,0,0,0,0,0,0
00000 127 858993459455 deny kryptolan from any to any
00000 127 858993459455 deny scps from any to any
00000 127 858993459455 deny 241 from any to any

Any ideas are welcome, and yes, I will be upgrading to 3.4.  I'm just
curious as to what is causing this.


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?38B56A49.74D5C091>