From owner-freebsd-questions@FreeBSD.ORG  Mon Aug 20 13:40:37 2007
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 6594016A41B
	for <freebsd-questions@freebsd.org>;
	Mon, 20 Aug 2007 13:40:37 +0000 (UTC)
	(envelope-from ngharibyan@mail.ru)
Received: from mx27.mail.ru (mx27.mail.ru [194.67.23.64])
	by mx1.freebsd.org (Postfix) with ESMTP id 219F013C468
	for <freebsd-questions@freebsd.org>;
	Mon, 20 Aug 2007 13:40:37 +0000 (UTC)
	(envelope-from ngharibyan@mail.ru)
Received: from [91.103.27.104] (port=3043 helo=sis2w001)
	by mx27.mail.ru with asmtp 
	id 1IN7Ug-000LGa-00; Mon, 20 Aug 2007 17:40:35 +0400
From: "Narek Gharibyan" <ngharibyan@mail.ru>
To: "'Grant Peel'" <gpeel@thenetnow.com>,
	<freebsd-questions@freebsd.org>
References: <037d01c7e32b$0c8d3c70$6501a8c0@GRANT>
Date: Mon, 20 Aug 2007 18:40:25 +0500
Message-ID: <000001c7e32f$ac28edc0$180ca8c0@arm.synisys.com>
MIME-Version: 1.0
Content-Type: text/plain;
	charset="us-ascii"
Content-Transfer-Encoding: 7bit
X-Mailer: Microsoft Office Outlook 11
Thread-Index: AcfjKzoHndz/I1G4RemEXS4sOEVZ0gABE74g
In-Reply-To: <037d01c7e32b$0c8d3c70$6501a8c0@GRANT>
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3138
Cc: 
Subject: RE: IPFW Questions.
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 20 Aug 2007 13:40:37 -0000

I have same problem related to ipfw pullup. I couldn't find any
documentation or solution on it.
Narek

-----Original Message-----
From: owner-freebsd-questions@freebsd.org
[mailto:owner-freebsd-questions@freebsd.org] On Behalf Of Grant Peel
Sent: Monday, August 20, 2007 6:07 PM
To: freebsd-questions@freebsd.org
Subject: IPFW Questions.

Hi all,

I was wondering what the concensus is on using dynamic rules in IPFW. Every
once in a while, I suppose there is a DoS attaclk that causes me to see
hundreds of:

+ipfw: install_state: Too many dynamic rules

in my security log.

I am sure i read somewhere that many people are skipping the dynamic rules
and just relying on the line by line rules.

You thoughts please.

Any while your up, does anyone really know what this means?

ipfw: pullup failed

I dont see that often maybe 1 or 2 times a month.

-Grant
_______________________________________________
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.org"