From owner-freebsd-ipfw@FreeBSD.ORG  Mon Nov 20 11:31:04 2006
Return-Path: <owner-freebsd-ipfw@FreeBSD.ORG>
X-Original-To: freebsd-ipfw@freebsd.org
Delivered-To: freebsd-ipfw@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [69.147.83.52])
	by hub.freebsd.org (Postfix) with ESMTP id C38EC16A403
	for <freebsd-ipfw@freebsd.org>; Mon, 20 Nov 2006 11:31:04 +0000 (UTC)
	(envelope-from cichas@post.cz)
Received: from mxm.seznam.cz (mxmn.seznam.cz [212.80.76.45])
	by mx1.FreeBSD.org (Postfix) with SMTP id 632CB43D67
	for <freebsd-ipfw@freebsd.org>; Mon, 20 Nov 2006 11:30:47 +0000 (GMT)
	(envelope-from cichas@post.cz)
Received: (qmail 22272 invoked by uid 0); 20 Nov 2006 11:14:21 -0000
To: freebsd-ipfw@freebsd.org
Date: Mon, 20 Nov 2006 12:14:17 +0100 (CET)
From: =?us-ascii?Q?Ja=20Cichas?= <cichas@post.cz>
Received: from [195.122.204.154] by email.seznam.cz with HTTP
	for cichas@post.cz; Mon, 20 Nov 2006 12:10:24 +0100 (CET)
Mime-Version: 1.0
Message-Id: <695.1644-28402-1926237411-1164021257@post.cz>
Content-Transfer-Encoding: 7bit
Content-Type: text/plain;
	charset="us-ascii"
X-Abuse: helpdesk@seznam.cz
X-Seznam-User: cichas@post.cz
Subject: ipfw: ouch!, skip past end of rules, denying packet
X-BeenThere: freebsd-ipfw@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: IPFW Technical Discussions <freebsd-ipfw.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw>,
	<mailto:freebsd-ipfw-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-ipfw>
List-Post: <mailto:freebsd-ipfw@freebsd.org>
List-Help: <mailto:freebsd-ipfw-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw>,
	<mailto:freebsd-ipfw-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 20 Nov 2006 11:31:04 -0000


Hello,
after upgrade from FreeBSD 4.11 to 6.1-RELEASE-p10  we are getting lots of $SUBJ messages in log. 
It is triggered by "ipfw -f flush" command when firewall is reloaded.

Other info:
HZ=1000
dummynet pipes (without them no $SUBJ)
net.inet.ip.fw.one_pass: 0    (need for traffic counting after pipe)
no skipto rule


Any solution, please?