Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 26 Dec 1998 01:44:46 +0000
From:      Ben Smithurst <ben@scientia.demon.co.uk>
To:        Brian Gallucci <brian@briang.org>
Cc:        FreeBSD <freebsd-questions@FreeBSD.ORG>
Subject:   Re: IPFW Deny
Message-ID:  <19981226014446.A19770@scientia.demon.co.uk>
In-Reply-To: <000401be3052$0b1f3a40$2900a8c0@brians-desktop.briang.org>
References:  <000401be3052$0b1f3a40$2900a8c0@brians-desktop.briang.org>

next in thread | previous in thread | raw e-mail | index | archive | help
Brian Gallucci wrote:

> What does this mean ? Their is no IP in the Deny message..

What? There are two of them.

> ipfw: 8900 Deny TCP 24.1.213.0:1414 24.1.12x.xxx:12345 in via fxp0
>                                                      ^^^^

I suspect those "x" characters are added by you. If they're not, I have
no idea what's going on, but I think they were.

from sys/netinet/ip_fw.c:

	case IPPROTO_TCP:
		printf("TCP ");
		print_ip(ip->ip_src);
		if ((ip->ip_off & IP_OFFMASK) == 0)
			printf(":%d ", ntohs(tcp->th_sport));
		else
			printf(" ");
		print_ip(ip->ip_dst);
		if ((ip->ip_off & IP_OFFMASK) == 0)
			printf(":%d", ntohs(tcp->th_dport));
		break;

The first IP is the source, the second is the destination.

-- 
Ben Smithurst
ben@scientia.demon.co.uk

send a blank message to ben+pgp@scientia.demon.co.uk for PGP key

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?19981226014446.A19770>