From owner-freebsd-stable Thu Dec 19 19:19:40 2002 Delivered-To: freebsd-stable@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 4C6FC37B401 for ; Thu, 19 Dec 2002 19:19:39 -0800 (PST) Received: from tigger.pacehouse.com (63-203-204-120.dsl.snfc21.pacbell.net [63.203.204.120]) by mx1.FreeBSD.org (Postfix) with ESMTP id 8C7C743EDA for ; Thu, 19 Dec 2002 19:19:37 -0800 (PST) (envelope-from jepace@pobox.com) Received: from tigger.pacehouse.com (localhost [127.0.0.1]) by tigger.pacehouse.com (8.12.6/8.12.5) with ESMTP id gBILP2e3070153 for ; Wed, 18 Dec 2002 13:25:02 -0800 (PST) (envelope-from jepace@pobox.com) Received: from localhost (jepace@localhost) by tigger.pacehouse.com (8.12.6/8.12.6/Submit) with ESMTP id gBILP2ee070150 for ; Wed, 18 Dec 2002 13:25:02 -0800 (PST) X-Authentication-Warning: tigger.pacehouse.com: jepace owned process doing -bs Date: Wed, 18 Dec 2002 13:25:02 -0800 (PST) From: James Pace X-X-Sender: jepace@tigger.pacehouse.com Reply-To: James Pace To: freebsd-stable@freebsd.org Subject: ipfw and rule 65535 Message-ID: <20021218132335.D3893-100000@tigger.pacehouse.com> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-stable@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG (No reply in -questions, so trying here. Thanks.) Here is the end of the output from 'ipfw show': 04000 0 0 deny log ip from any to any 65535 91 8227 deny ip from any to any Can anyone explain why the last rule is getting hit? I was under the impression that the rules are traversed in order, so 4000 should catch anything that 65535 would. This is FreeBSD 4.7-STABLE: Sun Nov 10 10:42:32 PST 2002 Thanks! -James -- James Pace To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-stable" in the body of the message