From owner-freebsd-ipfw@freebsd.org Thu Aug 13 15:21:27 2015 Return-Path: Delivered-To: freebsd-ipfw@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 3E7EF9A0A73 for ; Thu, 13 Aug 2015 15:21:27 +0000 (UTC) (envelope-from rizzo.unipi@gmail.com) Received: from mail-la0-x236.google.com (mail-la0-x236.google.com [IPv6:2a00:1450:4010:c03::236]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id B957CF60; Thu, 13 Aug 2015 15:21:26 +0000 (UTC) (envelope-from rizzo.unipi@gmail.com) Received: by labd1 with SMTP id d1so28208457lab.1; Thu, 13 Aug 2015 08:21:24 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:sender:in-reply-to:references:date:message-id:subject :from:to:cc:content-type; bh=nXqmoSSA4ykYDcJF+uMQIz7bumA/RQ4PIhvr/yfLX8s=; b=oupfysNyBdVGvdhGoWscbZLQO3NHAB2XTAjmb5fHUqtxkQXkCBByDufRg2bGhjHnjX 0Rz1tGYtCCW1W9l1UrEOJKojeVVXtNqJzBOptmvXlHcWNGYF06HDRM6DKYj4xmZvkmJV yYU3kXu0J24zkM6kHpX/kRVK5vH6Hg/DxSS5YZ4PiBVuNVwxAl+uSW1iFBoMdbSD24VH WbHj6aFeSj4Nw59nzFkoRj7VgyvBauhZPGNBufyyJgzVAilrw0z/EpmiofBOQaGrgTcm TwET52eyJX0CX3iN9Xk0Q2aIFtor2DUKS6TEaeq+85JUcI3p0SEWxU4oBQqMp28g4yIH 8Cyg== MIME-Version: 1.0 X-Received: by 10.112.210.6 with SMTP id mq6mr36973757lbc.83.1439479284772; Thu, 13 Aug 2015 08:21:24 -0700 (PDT) Sender: rizzo.unipi@gmail.com Received: by 10.114.172.140 with HTTP; Thu, 13 Aug 2015 08:21:24 -0700 (PDT) In-Reply-To: <55CCB543.20504@freebsd.org> References: <55BF368A.60004@elischer.org> <20150803234952.O17327@sola.nimnet.asn.au> <925201438613458@web7h.yandex.ru> <55BFC7A7.2000907@freebsd.org> <252361438673995@web5h.yandex.ru> <55CC1BFF.5090800@freebsd.org> <20150813233624.P8515@sola.nimnet.asn.au> <20150814003533.I8515@sola.nimnet.asn.au> <55CCB543.20504@freebsd.org> Date: Thu, 13 Aug 2015 17:21:24 +0200 X-Google-Sender-Auth: Hnb4tWkzaRWgBCJtwpAwvY3kCWI Message-ID: Subject: Re: ipfw delete 100-300 From: Luigi Rizzo To: Julian Elischer Cc: Ian Smith , "freebsd-ipfw@freebsd.org" , "Alexander V. Chernikov" Content-Type: text/plain; charset=UTF-8 X-BeenThere: freebsd-ipfw@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: IPFW Technical Discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 13 Aug 2015 15:21:27 -0000 On Thu, Aug 13, 2015 at 5:18 PM, Julian Elischer wrote: > On 8/13/15 10:41 PM, Ian Smith wrote: >> >> On Thu, 13 Aug 2015 16:30:15 +0200, Luigi Rizzo wrote: >> > On Thu, Aug 13, 2015 at 4:00 PM, Ian Smith >> wrote: >> > > On Thu, 13 Aug 2015 12:24:31 +0800, Julian Elischer wrote: >> > > > BTW, any ideas as to what causes this? >> > > > # ipfw show >> > > > [...] >> > > > 00400 0 0 deny ip from 10.12.1.0/24 to >> any in recv >> > > > xn0 >> > > > 00500 0 16045693110842147038 deny ip from 204.109.63.0/25 to >> any in recv >> > > > xn1 >> > > > 00600 0 0 allow ip from any to any in >> recv xn1 >> > > > [...] >> > > > 65535 8251 16045693110842147290 deny ip from any to any >> > > > >> > > > >> > > > -current as of the 5th of august >> > > > FreeBSD vps1.elischer.org 11.0-CURRENT FreeBSD 11.0-CURRENT #1 >> r286304: Wed >> > > > Aug 5 14:31:10 PDT 2015 >> > > > root@vps1.elischer.org:/usr/obj/usr/src-current/sys/VPS1 i386 >> > > > >> > > > note i386, not amd64. >> > > >> > > Assuming all digits were shown, on a wild hunch: >> > > >> > > t23% echo 'scale=20; 2^64 - 16045693110842147038' | bc >> > > 2401050962867404578 >> > > t23% echo 'scale=20; 2^63 - 16045693110842147038' | bc >> > > -6822321073987371230 >> > > >> > >> > bc >> > obase=16 >> > 16045693110842147038 >> > DEADC0DEDEADC0DE >> > >> > so... somehow pointing in a bad place. >> >> Ah, quite so .. and rule 65535 looks like a slightly worse place. >> >> t23% echo 'obase=16; 16045693110842147290' | bc >> DEADC0DEDEADC1DA > > that's deadcode when it's had some packets added to it :-) > > I think our friend Mr Chernikov may have tripped up over something.. looks more like the "counter" API. The old counters were inline in the rules. cheers luigi > > > >> >> thanks, Ian >> > > _______________________________________________ > freebsd-ipfw@freebsd.org mailing list > https://lists.freebsd.org/mailman/listinfo/freebsd-ipfw > To unsubscribe, send any mail to "freebsd-ipfw-unsubscribe@freebsd.org" -- -----------------------------------------+------------------------------- Prof. Luigi RIZZO, rizzo@iet.unipi.it . Dip. di Ing. dell'Informazione http://www.iet.unipi.it/~luigi/ . Universita` di Pisa TEL +39-050-2217533 . via Diotisalvi 2 Mobile +39-338-6809875 . 56122 PISA (Italy) -----------------------------------------+-------------------------------