From owner-freebsd-ipfw@FreeBSD.ORG  Thu May  6 08:15:30 2004
Return-Path: <owner-freebsd-ipfw@FreeBSD.ORG>
Delivered-To: freebsd-ipfw@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 7CF6B16A4CF
	for <freebsd-ipfw@freebsd.org>; Thu,  6 May 2004 08:15:30 -0700 (PDT)
Received: from calypso.bi.lt (calypso.bi.lt [213.226.153.10])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 90BC443D3F
	for <freebsd-ipfw@freebsd.org>; Thu,  6 May 2004 08:15:29 -0700 (PDT)
	(envelope-from hugle@vkt.lt)
Received: by calypso.bi.lt (Postfix, from userid 506)
	id 85930598F43; Thu,  6 May 2004 18:15:27 +0300 (EEST)
X-Original-To: freebsd-ipfw@freebsd.org
Received: from vkt-dell (lan1.vkt.lt [213.226.136.201])
	by calypso.bi.lt (Postfix) with ESMTP id C1517598BAC
	for <freebsd-ipfw@freebsd.org>; Thu,  6 May 2004 18:15:26 +0300 (EEST)
Date: Thu, 6 May 2004 10:36:15 +0300
From: hugle <hugle@vkt.lt>
X-Mailer: The Bat! (v2.01)
X-Priority: 3 (Normal)
Message-ID: <158403649347.20040506103615@vkt.lt>
To: freebsd-ipfw@freebsd.org
In-Reply-To: <20040505194451.V9766@lath.rinet.ru>
References: <104341060709.20040505171307@vkt.lt>
 <20040505194451.V9766@lath.rinet.ru>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Subject: Re[2]: ipfw: ouch!, skip past end of rules, denying packet
X-BeenThere: freebsd-ipfw@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
Reply-To: hugle <hugle@vkt.lt>
List-Id: IPFW Technical Discussions <freebsd-ipfw.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw>,
	<mailto:freebsd-ipfw-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-ipfw>
List-Post: <mailto:freebsd-ipfw@freebsd.org>
List-Help: <mailto:freebsd-ipfw-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw>,
	<mailto:freebsd-ipfw-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 06 May 2004 15:15:30 -0000

OB> On Wed, 5 May 2004, hugle wrote:

>> Hello all.
>> I get such messages in dmesg:
>> ipfw: ouch!, skip past end of rules, denying packet
>> ipfw: ouch!, skip past end of rules, denying packet
>> ipfw: ouch!, skip past end of rules, denying packet
>> ipfw: ouch!, skip past end of rules, denying packet
>> ipfw: ouch!, skip past end of rules, denying packet
>> ipfw: ouch!, skip past end of rules, denying packet
>> ipfw: ouch!, skip past end of rules, denying packet
>> ipfw: ouch!, skip past end of rules, denying packet
>> ipfw: ouch!, skip past end of rules, denying packet
>> ipfw: ouch!, skip past end of rules, denying packet
>> ipfw: ouch!, skip past end of rules, denying packet
>> ipfw: ouch!, skip past end of rules, denying packet
>> ipfw: ouch!, skip past end of rules, denying packet
>> ipfw: ouch!, skip past end of rules, denying packet
>> ipfw: ouch!, skip past end of rules, denying packet
>> ipfw: ouch!, skip past end of rules, denying packet
>> ipfw: ouch!, skip past end of rules, denying packet
>> ipfw: ouch!, skip past end of rules, denying packet
>> ipfw: ouch!, skip past end of rules, denying packet
>>
>> what is causing such messages ?
>> google doesn't say anything..
>> and one more thing..
>> i've realised, that pipes doesn't give my banthiwith I should get
>>
>> instead of 100kbits i get ~70...
>> insted of 156 i get ~100
>> and so on..
>> anyone have a clue whete to search?
>>

OB> What is your value of net.inet.ip.fw.one_pass sysctl variable?


perl# sysctl net.inet.ip.fw.one_pass
net.inet.ip.fw.one_pass: 0