Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 7 Nov 2004 09:30:55 -0800 (PST)
From:      Dave McCammon <davemac11@yahoo.com>
To:        "Jason C. Wells" <jcw@highperformance.net>
Cc:        questions@freebsd.org
Subject:   Re: Ipfw Impossibility - Perpetual Motion Achieved!
Message-ID:  <20041107173055.65717.qmail@web41412.mail.yahoo.com>
In-Reply-To: <F53655C2448EEDEF5AE91158@[192.168.1.16]>

next in thread | previous in thread | raw e-mail | index | archive | help

--- "Jason C. Wells" <jcw@highperformance.net> wrote:

> Pray tell how is this report from 'ipfw show' even
> possible?
> 
> 17100   3   228 count ip from any to any
> 65535  27  1986 deny ip from any to any
> 
> If rule 17100 only counted three packets, then how
> did the very next rule 
> count 27?  I do not use 'skipto' rules.
> 
> We appear to be passing more packets out of rule
> 17100 than are going in. 
> If we can harness this energy, we can power the
> universe! :)
> 

I believe the 27 count is from boot-up before rule
17100 is loaded.



		
__________________________________ 
Do you Yahoo!? 
Check out the new Yahoo! Front Page. 
www.yahoo.com 
 



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20041107173055.65717.qmail>