Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 4 Feb 2007 17:10:38 +0300
From:      AstraSerg <astraserg@proc.ru>
To:        freebsd-ipfw@freebsd.org
Subject:   Big tables deny pakets
Message-ID:  <200702041710.38797.astraserg@proc.ru>

Next in thread | Raw E-Mail | Index | Archive | Help
Good day
I use big tables in my ipfw. There are some trables

gate# date ; ipfw show 2101 2102 2103
Sun Feb  4 17:07:01 MSK 2007
02101      97       5800 skipto 2102 ip from 192.168.122.17 to any
02102     150      10348 deny ip from table(64) to any
02103       0          0 skipto 2104 ip from 192.168.122.17 to any
gate#                                                                           



gate# date ; ipfw show 2101 2102 2103
Sun Feb  4 17:07:29 MSK 2007
02101     102       6100 skipto 2102 ip from 192.168.122.17 to any
02102     155      10648 deny ip from table(64) to any
02103       0          0 skipto 2104 ip from 192.168.122.17 to any
gate#                                                                        

Why counter 2103 not rgowing?

gate# ipfw table 64 list | grep 192.168.122
192.168.122.2/32 0
192.168.122.5/32 0
192.168.122.15/32 0
192.168.122.16/32 0
192.168.122.131/32 0
192.168.122.135/32 0
192.168.122.146/32 0
gate#            

and 

gate# ipfw table 64 list | grep -v /32
gate#                                              
                              
gate# uname -a
FreeBSD gate.proc.ru 6.2-PRERELEASE FreeBSD 6.2-PRERELEASE #1: Tue Oct 10 
21:48:09 MSD 2006 

Thanks











Want to link to this message? Use this URL: <http://docs.FreeBSD.org/cgi/mid.cgi?200702041710.38797.astraserg>