Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 18 Nov 2002 17:52:58 -0800
From:      Luigi Rizzo <rizzo@icir.org>
To:        Michael Sierchio <kudzu@tenebras.com>
Cc:        ipfw@FreeBSD.ORG
Subject:   Re: Apparent Bug in IPFW2 on 4.7-RELEASE-p2
Message-ID:  <20021118175258.A37219@xorpc.icir.org>
In-Reply-To: <3DD99810.7080000@tenebras.com>; from kudzu@tenebras.com on Mon, Nov 18, 2002 at 05:46:56PM -0800
References:  <200211130102.27773.john@jnielsen.net> <20021113003045.A35862@xorpc.icir.org> <3DD7D3CC.50701@tenebras.com> <20021117093955.A17750@xorpc.icir.org> <3DD99810.7080000@tenebras.com>

next in thread | previous in thread | raw e-mail | index | archive | help
known and fixed bug -- the kernel was using the wrong address
(src instead of dst, and viceversa) in the 1.2.3.4/24{3,45}
instructions. Fixed in rev.1.6.2.4 of ip_fw2.c (oct.24)

	cheers
	luigi

On Mon, Nov 18, 2002 at 05:46:56PM -0800, Michael Sierchio wrote:
> 
> the 1.2.3.4/24{3,45} notation doesn't seem to work. Witness (from ipfw show):
> 
> 01910          0          0 allow udp from any to 66.92.188.0/24{18,241} dst-port 53 in recv sis0
> 01920          1         62 allow udp from any to 66.92.188.18 dst-port 53 in recv sis0
> 01930          3        184 allow udp from any to 66.92.188.241 dst-port 53 in recv sis0
> 
> 
> Rule 1910 should have been triggered in the case of these
> packets, and should never have gotten to rules 1920 or 1930
> 
> Has this been reported before, and was I just sleeping?
> 
> 
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-ipfw" in the body of the message

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-ipfw" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20021118175258.A37219>