Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 26 Aug 2003 19:24:26 +0000
From:      bdb@north-eastham.org
To:        Sean Chittenden <sean@chittenden.org>
Cc:        questions@FreeBSD.org
Subject:   Re: ipfilter per rule ttl's not working?
Message-ID:  <20030826192426.GA43113@massasoit.north-eastham.org>
In-Reply-To: <20030826154840.GA32088@perrin.nxad.com>
References:  <20030826154840.GA32088@perrin.nxad.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On Tue, Aug 26, 2003 at 08:48:40AM -0700, Sean Chittenden wrote:
> # ipf -Fa -f /etc/ipf.rules
> 693: invalid ttl (604800)
> 
> :-/ One would think that 604800 would qualify as a decnumber.  Am I
> missing something or is this a documented non-feature?

ttl here specifies the Time-to-live (i.e., hop count) in the IP packet
header, something different altogether.  What you want is timeout; 
from what I understand, this cannot be changed per rule with ipf.

> -sc

-- 
"It is a very sad thing that nowadays there is so little useless
  information."  -- Oscar Wilde



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20030826192426.GA43113>