Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 3 Aug 2002 22:13:54 -0700
From:      Luigi Rizzo <>
To:        Nick Rogness <>
Cc:        freebsd-ipfw@FreeBSD.ORG
Subject:   Re: natd & keep-state
Message-ID:  <>
In-Reply-To: <>; from on Sun, Aug 04, 2002 at 12:23:05AM -0500
References:  <> <>

Next in thread | Previous in thread | Raw E-Mail | Index | Archive | Help
On Sun, Aug 04, 2002 at 12:23:05AM -0500, Nick Rogness wrote:
> > I still do not follow... isn't this exactly what you want ?
> > 
> >     ipfw add skipto 5000 <bla bla bla> keep-state
> > 
> > check-state does not stop, it just executes whatever action is
> > specified for the original rule from which the state was created. So
> > if that one is a skipto you have a skipto.
> 	Yes, that is exactly what I want.  I tried that exact rule, but it
> 	did not work for some reason :-(  In versions prior to 4.6 (forgot
> 	what versions specifically)...all of them didn't work.  Haven't
> 	tried with your ipfw2 or post 4.6 yet...will try and let you know.

seems to work here with ipfw2. The code in ip_fw.c seems to do
a similar thing, and i do not remember doing any change in that


To Unsubscribe: send mail to
with "unsubscribe freebsd-ipfw" in the body of the message

Want to link to this message? Use this URL: <>