From owner-freebsd-ipfw@FreeBSD.ORG Wed Nov 22 19:20:49 2006 Return-Path: X-Original-To: ipfw@freebsd.org Delivered-To: freebsd-ipfw@FreeBSD.ORG Received: from mx1.FreeBSD.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id D640016A53B for ; Wed, 22 Nov 2006 19:20:49 +0000 (UTC) (envelope-from vladone@spaingsm.com) Received: from pandora.routing.ro (thunder.lsstelecom.ro [194.117.236.32]) by mx1.FreeBSD.org (Postfix) with ESMTP id 34C46440A8 for ; Wed, 22 Nov 2006 19:18:28 +0000 (GMT) (envelope-from vladone@spaingsm.com) Received: (qmail 19722 invoked by uid 1010); 22 Nov 2006 21:16:32 +0200 Received: from 88.158.112.6 by pandora (envelope-from , uid 1007) with qmail-scanner-LSS (clamdscan: 0.88/1337. spamassassin: 3.1.1. perlscan: 1.25-st-qms. Clear:RC:1(88.158.112.6):. Processed in 2.46099 secs); 22 Nov 2006 19:16:32 -0000 LSS-Antivirus-Mail-From: vladone@spaingsm.com via pandora LSS-Antivirus: LSS (Clear:RC:1(88.158.112.6):. Processed in 2.46099 secs Process 19714/19683) Received: from 6.112.158.88.radiocom.ro (HELO ?10.0.0.10?) (vladone@spaingsm.com@88.158.112.6) by mail.lsstelecom.ro with SMTP; 22 Nov 2006 21:16:30 +0200 Date: Wed, 22 Nov 2006 21:17:49 +0200 From: Fratiman Vladut X-Mailer: The Bat! (v3.80.03) Professional Organization: home X-Priority: 3 (Normal) Message-ID: <816891059.20061122211749@spaingsm.com> To: ipfw@freebsd.org In-Reply-To: <695.1644-28402-1926237411-1164021257@post.cz> References: <695.1644-28402-1926237411-1164021257@post.cz> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Cc: Subject: Re: ipfw: ouch!, skip past end of rules, denying packet X-BeenThere: freebsd-ipfw@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: Fratiman Vladut List-Id: IPFW Technical Discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 22 Nov 2006 19:20:50 -0000 Hello Ja, Monday, November 20, 2006, 1:14:17 PM, you wrote: > Hello, > after upgrade from FreeBSD 4.11 to 6.1-RELEASE-p10 we are getting lots of $SUBJ messages in log. > It is triggered by "ipfw -f flush" command when firewall is reloaded. > Other info: > HZ=1000 > dummynet pipes (without them no $SUBJ) > net.inet.ip.fw.one_pass: 0 (need for traffic counting after pipe) > no skipto rule > Any solution, please? > _______________________________________________ > freebsd-ipfw@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw > To unsubscribe, send any mail to > "freebsd-ipfw-unsubscribe@freebsd.org" This message is given by packets that exist in pipe queue's after flush ipfw rules. -- Best regards, Fratiman mailto:vladone@spaingsm.com