From owner-freebsd-ipfw  Thu Apr 25 15:24: 2 2002
Delivered-To: freebsd-ipfw@freebsd.org
Received: from gunjin.wccnet.org (gunjin.wccnet.org [198.111.176.99])
	by hub.freebsd.org (Postfix) with ESMTP
	id 5153137B416; Thu, 25 Apr 2002 15:23:59 -0700 (PDT)
Received: from gunjin.wccnet.org (localhost.wccnet.org [127.0.0.1])
	by gunjin.wccnet.org (8.12.2/8.12.2) with ESMTP id g3PMSppc091506;
	Thu, 25 Apr 2002 18:28:51 -0400 (EDT)
Received: (from rex@localhost)
	by gunjin.wccnet.org (8.12.2/8.12.1/Submit) id g3PMSpKo091505;
	Thu, 25 Apr 2002 18:28:51 -0400 (EDT)
Date: Thu, 25 Apr 2002 18:28:50 -0400
From: "Rex A. Roof" <rex@gunjin.wccnet.org>
To: Gregory Neil Shapiro <gshapiro@FreeBSD.ORG>
Cc: "Rex A. Roof" <rex@gunjin.wccnet.org>, freebsd-ipfw@FreeBSD.ORG
Subject: Re: Putting in place an incoming sendmail limit
Message-ID: <20020425182850.A91480@rexroof.com>
References: <200204252052.g3PKqrj0090391@gunjin.wccnet.org> <15560.29198.657946.738003@horsey.gshapiro.net>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.2.5i
In-Reply-To: <15560.29198.657946.738003@horsey.gshapiro.net>; from gshapiro@FreeBSD.ORG on Thu, Apr 25, 2002 at 02:15:58PM -0700
Sender: owner-freebsd-ipfw@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-ipfw.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-ipfw>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-ipfw>
X-Loop: FreeBSD.ORG

On Thu, Apr 25, 2002 at 02:15:58PM -0700, Gregory Neil Shapiro wrote:
> 
> Perhaps it is because that rule matches every packet into of just the TCP
> setup packet.  You might try using the 'setup' keyword.  (Just a guess).

okay, I added the setup keyword and it seemed to get rid of the 
"OUCH! cannot remove rule, count 1" message.

I also noticed that if I open an smtp connection to the computer, 
and then close it and wait a minute, I can't make another smtp 
connection to the firewalled machine.  Is there a way to define
that I want any machine to be able to have 1 and only one smtp connection?

or will this always limit them for a set period of time?

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-ipfw" in the body of the message