Date: Tue, 28 Nov 2006 12:30:47 -0800 From: Chuck Swiger <cswiger@mac.com> To: gschultz@scriptpro.com Cc: questions@FreeBSD.org Subject: Re: ping through ipfw giving unexpected results Message-ID: <EB01767F-30AD-4B91-B512-2D27D9BACEBB@mac.com> In-Reply-To: <378BFA1E1FEC59458FEB168D1B4BD0075C995A@excsvr003.scriptpro.com> References: <378BFA1E1FEC59458FEB168D1B4BD0075C995A@excsvr003.scriptpro.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On Nov 28, 2006, at 12:07 PM, gschultz@scriptpro.com wrote: > I tried this at plr's from 0.002 up to 0.47, and did the math: > ping is > failing exactly (allowing for statistical variation) 1.500 times more > than expected. This is too unlikely to be chance, so I figure the > nice > round fraction of additional failures is due to something I don't yet > understand. Can anyone explain this result? Thanks. Sounds like your rules are also being applied to the ICMP response, as well? If you have plr = .25, there's a .75 chance that the request will go through; if the request does go through, there will be a .75 chance that the reply will also get back, for a total .25 + .75 * .25 == . 4375 chance of no answer getting through...? -- -Chuck
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?EB01767F-30AD-4B91-B512-2D27D9BACEBB>