From owner-freebsd-questions@FreeBSD.ORG  Mon Nov 17 06:32:01 2003
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 4109016A4CE
	for <freebsd-questions@freebsd.org>;
	Mon, 17 Nov 2003 06:32:01 -0800 (PST)
Received: from gs166.sp.cs.cmu.edu (GS166.SP.CS.CMU.EDU [128.2.205.169])
	by mx1.FreeBSD.org (Postfix) with SMTP id 7010F43F75
	for <freebsd-questions@freebsd.org>;
	Mon, 17 Nov 2003 06:32:00 -0800 (PST)
	(envelope-from dpelleg@gs166.sp.cs.cmu.edu)
Sender: dpelleg@gs166.sp.cs.cmu.edu
To: Kris Kennaway <kris@obsecurity.org>
References: <200311170230.30400.petre@kgb.ro>
	<20031117021221.GA21013@xor.obsecurity.org>
From: Dan Pelleg <daniel+bsd@pelleg.org>
Date: 17 Nov 2003 09:31:33 -0500
In-Reply-To: <20031117021221.GA21013@xor.obsecurity.org>
Message-ID: <u2s1xs7kqwq.fsf@gs166.sp.cs.cmu.edu>
Lines: 17
User-Agent: Gnus/5.0808 (Gnus v5.8.8) XEmacs/21.1 (Cuyahoga Valley)
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
cc: freebsd-questions@freebsd.org
cc: Petre Bandac <petre@kgb.ro>
Subject: Re: what does this message mean ?
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 17 Nov 2003 14:32:01 -0000

Kris Kennaway <kris@obsecurity.org> writes:

> On Mon, Nov 17, 2003 at 02:30:30AM +0200, Petre Bandac wrote:
> > Nov 17 02:27:59 kgb /kernel: OUCH! cannot remove rule, count 1
> > 
> > why ouch and what rule ?
> 
> I think that's an ipfw message..it's probably an ipfw bug of some
> kind.

It is. But a few of those were corrected in the past. Make sure you're
running an up-to-date version (eg 4.9-RELEASE; iirc even 4.8 should be ok).


-- 

  Dan Pelleg