Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 11 Apr 1997 16:02:28 +1000 (EST)
From:      "Daniel O'Callaghan" <danny@panda.hilink.com.au>
To:        Adam David <adam@veda.is>
Cc:        hackers@freebsd.org
Subject:   Re: kern/3244: ipfw flush closes connections
Message-ID:  <Pine.BSF.3.91.970411155937.10264m-100000@panda.hilink.com.au>
In-Reply-To: <199704110545.FAA10622@veda.is>

next in thread | previous in thread | raw e-mail | index | archive | help


On Fri, 11 Apr 1997, Adam David wrote:

> This is also weird...
> 
> 'sh /etc/rc.firewall' invoked from a telnet or rlogin connection will break
> the connection, but if it is invoked from the console instead the network
> login connection stays open.

Have you read my earlier e-mail?  This occurs because if you leave out 
the '-q' option 'flush' says "Flushed all rules".  But when the tcp 
packets come to be sent, and error "Permission denied" is return, so 
telnetd/rlogind quite, kernel resets connection and the rest of 
rc.firewall is probably not executed.

Use -q with your flush in 2.2-RELEASE and later. 
If you don't have -q, make sure you do

 ipfw -f flush >/dev/null 2>&1

Danny



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.3.91.970411155937.10264m-100000>