From owner-freebsd-current Mon Jan 13 8:21: 0 2003 Delivered-To: freebsd-current@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id F099237B401 for ; Mon, 13 Jan 2003 08:20:58 -0800 (PST) Received: from mail.evip.pl (mail.evip.com.pl [212.244.157.179]) by mx1.FreeBSD.org (Postfix) with ESMTP id A25F143F65 for ; Mon, 13 Jan 2003 08:20:57 -0800 (PST) (envelope-from w@evip.pl) Received: from w by mail.evip.pl with local (Exim 4.10) id 18Y7Ka-0004xf-00; Mon, 13 Jan 2003 17:20:56 +0100 Date: Mon, 13 Jan 2003 17:20:56 +0100 From: Wiktor Niesiobedzki To: Maxim Konovalov Cc: current@FreeBSD.ORG Subject: Re: IPFW2 skipto + logging Message-ID: <20030113162056.GB6882@mail.evip.pl> References: <20021110173443.A5529@mail.evip.pl> <20030112165156.G22175@news1.macomnet.ru> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20030112165156.G22175@news1.macomnet.ru> User-Agent: Mutt/1.4i Sender: owner-freebsd-current@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG On Sun, Jan 12, 2003 at 04:52:53PM +0300, Maxim Konovalov wrote: > > Hello, > > Please try a next patch: > It seems, that now logging with skipto is working correctly (I get expected results), but funny thing, when there is no log rule, the skipto command won't work. Consider this results: portal# ipfw show 00100 172 139364 skipto 400 log ip from 192.168.0.0/24 to 192.168.0.0/24 00101 0 0 skipto 400 log ip from 192.168.0.0/24 to 192.168.0.0/24 00102 0 0 skipto 400 log ip from 192.168.0.0/24 to 192.168.0.0/24 00400 180 140052 allow ip from any to any 65535 0 0 deny ip from any to any and portal# ipfw show 00100 186 140632 skipto 400 ip from 192.168.0.0/24 to 192.168.0.0/24 00101 186 140632 skipto 400 ip from 192.168.0.0/24 to 192.168.0.0/24 00102 186 140632 skipto 400 ip from 192.168.0.0/24 to 192.168.0.0/24 00103 186 140632 skipto 400 ip from 192.168.0.0/24 to 192.168.0.0/24 00400 192 141136 allow ip from any to any 65535 0 0 deny ip from any to any The second one, without logging is just not working now... Best regards, Wiktor Niesiobedzki To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-current" in the body of the message