From owner-freebsd-stable Mon Oct 5 12:52:36 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id MAA16401 for freebsd-stable-outgoing; Mon, 5 Oct 1998 12:52:36 -0700 (PDT) (envelope-from owner-freebsd-stable@FreeBSD.ORG) Received: from roma.coe.ufrj.br (roma.coe.ufrj.br [146.164.53.65]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id MAA16015 for ; Mon, 5 Oct 1998 12:50:45 -0700 (PDT) (envelope-from jonny@jonny.eng.br) Received: (from jonny@localhost) by roma.coe.ufrj.br (8.8.8/8.8.8) id QAA26791; Mon, 5 Oct 1998 16:45:18 -0300 (EST) (envelope-from jonny) From: Joao Carlos Mendes Luis Message-Id: <199810051945.QAA26791@roma.coe.ufrj.br> Subject: Re: ipfw SkipTo behavior changed In-Reply-To: from Jeff Kletsky at "Oct 5, 98 09:15:45 am" To: Jeff@Wagsky.com (Jeff Kletsky) Date: Mon, 5 Oct 1998 16:45:18 -0300 (EST) Cc: freebsd-stable@FreeBSD.ORG X-Mailer: ELM [version 2.4ME+ PL40 (25)] MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Sender: owner-freebsd-stable@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG #define quoting(Jeff Kletsky) // In trying to resolve puzzling behavior on a "new" FreeBSD box // (2.2.7-STABLE, cvsup as of 980929), it appears that the behavior of the // SkipTo rules in ipfw/kernel have changed. Previously a rule such as // // 2200 skipto 3000 all from 127.0.0.1 to 127.0.0.1 recv lo0 in // // would "skipto" the next-higher numbered rule in the list if 3000 did not // exist. This build seems to require that a rule 3000 explicitly exist. If // it does not exist, it proceeds as if rule 2200 is not matched. // // Is this an "intentional" change in the firewall code? If not, has a later // release changed back to the older behavior? IIRC Luigi has changed this behaviour together with the DUMMYNET integration. It was intentional, for code optimization. Jonny -- Joao Carlos Mendes Luis M.Sc. Student jonny@jonny.eng.br Universidade Federal do Rio de Janeiro "This .sig is not meant to be politically correct." To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-stable" in the body of the message