From owner-freebsd-questions@FreeBSD.ORG Tue Aug 26 12:25:42 2003 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 5D85916A4BF for ; Tue, 26 Aug 2003 12:25:42 -0700 (PDT) Received: from massasoit.north-eastham.org (massasoit.north-eastham.org [209.105.161.2]) by mx1.FreeBSD.org (Postfix) with ESMTP id 86F3D43FD7 for ; Tue, 26 Aug 2003 12:25:41 -0700 (PDT) (envelope-from bdb@north-eastham.org) Received: by massasoit.north-eastham.org (Postfix, from userid 1000) id E0A793B30A; Tue, 26 Aug 2003 19:24:26 +0000 (GMT) Date: Tue, 26 Aug 2003 19:24:26 +0000 From: bdb@north-eastham.org To: Sean Chittenden Message-ID: <20030826192426.GA43113@massasoit.north-eastham.org> References: <20030826154840.GA32088@perrin.nxad.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20030826154840.GA32088@perrin.nxad.com> User-Agent: Mutt/1.4.1i cc: questions@FreeBSD.org Subject: Re: ipfilter per rule ttl's not working? X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 26 Aug 2003 19:25:42 -0000 On Tue, Aug 26, 2003 at 08:48:40AM -0700, Sean Chittenden wrote: > # ipf -Fa -f /etc/ipf.rules > 693: invalid ttl (604800) > > :-/ One would think that 604800 would qualify as a decnumber. Am I > missing something or is this a documented non-feature? ttl here specifies the Time-to-live (i.e., hop count) in the IP packet header, something different altogether. What you want is timeout; from what I understand, this cannot be changed per rule with ipf. > -sc -- "It is a very sad thing that nowadays there is so little useless information." -- Oscar Wilde