Date: Fri, 04 Apr 2008 11:09:19 +0200 From: Ivan Voras <ivoras@freebsd.org> To: freebsd-net@freebsd.org Subject: Re: Trouble with IPFW or TCP? Message-ID: <ft4r7v$ub9$3@ger.gmane.org> In-Reply-To: <47F57437.6040400@elischer.org> References: <ft3phn$ai3$1@ger.gmane.org> <47F57437.6040400@elischer.org>
next in thread | previous in thread | raw e-mail | index | archive | help
This is an OpenPGP/MIME signed message (RFC 2440 and 3156) --------------enig5E3D2D59E7F4BE98E6F221EF Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Julian Elischer wrote: > Ivan Voras wrote: >> In which case would an ipfw ruleset like this: >> >> 00100 114872026 40487887607 allow ip from any to any via lo0 >> 00200 0 0 deny ip from any to 127.0.0.0/8 >> 00300 0 0 deny ip from 127.0.0.0/8 to any >> 00600 1585 112576 deny ip from table(0) to me > ipfw add 700 check-state Predictably, adding check-state doesn't do anything new. Additionally, the counters of check-state are always 0 (I don't know if this is good or not). --------------enig5E3D2D59E7F4BE98E6F221EF Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (GNU/Linux) iD8DBQFH9fA/ldnAQVacBcgRAvoDAJ94W3FvLXT0m5UUy5O7+zfY5arE1gCffhXa 8TGZKzSarV3FSkpNFjS6QGk= =faaQ -----END PGP SIGNATURE----- --------------enig5E3D2D59E7F4BE98E6F221EF--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?ft4r7v$ub9$3>