Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 24 Jun 2005 02:21:14 +1000
From:      Norberto Meijome <freebsd@meijome.net>
To:        freebsd-questions@freebsd.org
Subject:   Re: IPFILTER 'again' ?
Message-ID:  <42BAE17A.4040503@meijome.net>
In-Reply-To: <BAY20-F271D2273E9724F83E2D293A8EA0@phx.gbl>
References:  <BAY20-F271D2273E9724F83E2D293A8EA0@phx.gbl>

next in thread | previous in thread | raw e-mail | index | archive | help
Stephan Weaver wrote:
> Hello,
> 
> I notice this in my /var/log/ipfilter.log.
> 23/06/2005 10:36:06.691347 vr0 @0:29 b 196.3.132.4,53 -> 
> 192.168.1.1,61827 PR udp len 20 66 IN
> 23/06/2005 10:36:07.652341 vr0 @0:29 b 196.3.132.4,53 -> 
> 192.168.1.1,61828 PR udp len 20 70 IN

which one is rule #29? ( ipfstat -ion ). that's the one that's hitting 
to get blocked.

FWIW, my counting from the top (skipping comments) is

> block in log first quick on vr0 proto tcp all flags U/SFRAU

... i cant make much sense of this (no surprises there :-D), tcp rule 
blocking udp...so I'm pretty certain I'm wrong in something obvious.

cheers,
beto




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?42BAE17A.4040503>