From owner-freebsd-ipfw@FreeBSD.ORG Thu Apr 15 15:20:26 2004 Return-Path: Delivered-To: freebsd-ipfw@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 792E016A4CE for ; Thu, 15 Apr 2004 15:20:26 -0700 (PDT) Received: from telesto.bi.lt (telesto.bi.lt [213.226.153.12]) by mx1.FreeBSD.org (Postfix) with ESMTP id 98EEB43D2F for ; Thu, 15 Apr 2004 15:20:25 -0700 (PDT) (envelope-from hugle@vkt.lt) Received: from calypso.bi.lt (calypso.bi.lt [213.226.153.10]) by telesto.bi.lt (Postfix) with ESMTP id D465D974B9 for ; Fri, 16 Apr 2004 01:20:23 +0300 (EEST) Received: by calypso.bi.lt (Postfix, from userid 506) id 90AB0598044; Fri, 16 Apr 2004 01:20:24 +0300 (EEST) X-Original-To: freebsd-ipfw@freebsd.org Received: from vkt-dell (unknown [213.226.136.201]) by calypso.bi.lt (Postfix) with ESMTP id 60A3D598010 for ; Fri, 16 Apr 2004 01:20:24 +0300 (EEST) Date: Fri, 16 Apr 2004 01:20:29 +0300 From: hugle X-Mailer: The Bat! (v2.01) X-Priority: 3 (Normal) Message-ID: <132203851553.20040416012029@vkt.lt> To: freebsd-ipfw@freebsd.org MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Subject: ipfw FWD and NOT ME bug while SSHing ? X-BeenThere: freebsd-ipfw@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list Reply-To: hugle List-Id: IPFW Technical Discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 15 Apr 2004 22:20:26 -0000 Hello all. I've just noticed some problems here.... look : whilee sshing to the server after running such command: bash-2.05b# ipfw add 3032 fwd x.x.x.1 ip from 192.168.0.0/16 to not me && sleep 15 && ipfw delete 3032 & I've got 'disconencted' from ssh for 15 seconds, console hanged up. But I was able to ping the machine BUT I wasn't able to ssh to this machine with its IP 192.168.x.x while sshing to x.x.x.59 to the same machine I've got IN (and after rule automaticaly removed after 15 sec this ocnsole hanged up) And after 15 seconds i was able to INPUT further.. Doesn anyone met this problem before? PS. 03020 5274 4396532 fwd z.z.z.161 ip from 192.168.0.0/16 to not me dst-port 22 command like that didn't take any affect after adding, was able to SSH. -- Best regards,Hugle