Date: Thu, 20 Sep 2001 14:39:44 -0700 From: rick norman <rick.norman@lmco.com> To: cjclark@alum.mit.edu Cc: Paul Herman <pherman@frenchfries.net>, freebsd-questions@freebsd.org Subject: Re: ipfw Message-ID: <3BAA621F.95A88C1D@lmco.com> References: <20010920130530.W9645-100000@tick.sc.omation.com> <3BAA573C.3B180146@lmco.com> <20010920141036.H309@blossom.cjclark.org>
next in thread | previous in thread | raw e-mail | index | archive | help
The only other rule in the list is the last which is "65535 allow ip from any to any". The sysctl var one_pass is set to one though I tried it both ways. I understood the one_pass=1 to interject the pkt back into ip after the pipe so that it would get sent back. If I do an ipfw flush, the pkt is returned with no problem. ipfw list yields the following : 00100 pipe 1 icmp from any to any 65535 allow ip from any to any I figured out my delete problem, I was referencing the pipe number instead of the rule number. "Crist J. Clark" wrote: > On Thu, Sep 20, 2001 at 01:53:16PM -0700, rick norman wrote: > > No, it seems to have no effect. > > > > Paul Herman wrote: > > > > > On Tue, 18 Sep 2001, rick norman wrote: > > > > > > > I am attempting to use ipfw and dummynet to instrument some network > > > > traffic tests. I am running freebsd 4.3 release and have built the > > > > kernel > > > > with ipfirewall, dummynet, and default to enabled. For a simple test, I > > > > > > > > added a pipe "ipfw add pipe 1 icmp from any to any". When I ping this > > > > machine, I can do "ipfw pipe 1 show" and watch the counters increment, > > > > but the machine doing the pinging does not see a response to the ping. > > > > > > Does "sysctl net.inet.ip.fw.one_pass=0" help? > > Actually, I think Paul may have meant, > > # sysctl -w net.inet.ip.fw.one_pass=1 > > Or else you need a rule after the 'pipe' rule to actually pass the > ICMP. When you do a, > > # ipfw show > > While pinging, are other rules incrementing? Where do these ICMP > packets end up going in the firewall rules? > -- > Crist J. Clark cjclark@alum.mit.edu -- Logically speaking, logic is not the answer. Rick Norman rick.norman@lmco.com 408 742 1619 To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?3BAA621F.95A88C1D>