Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 18 May 2010 13:28:53 +0100
From:      Anton Shterenlikht <mexas@bristol.ac.uk>
To:        freebsd-questions@freebsd.org
Subject:   ipfilter rules question
Message-ID:  <20100518122852.GA6441@mech-cluster241.men.bris.ac.uk>

next in thread | raw e-mail | index | archive | help
I'm using ipfilter on -current.

Here's a fragment of the outgoing rules:

# ipfstat -on

*skip*
@14 pass out quick on bge0 proto udp from any to any port = 8649 keep state
*skip*
@18 pass out log first quick on bge0 all


And I see these ipmon entries in /var/log/ipfilter.log:

ipmon[765]: 00:01:04.242290 bge0 @0:18 p 137.222.187.221,10280 -> 239.2.11.71,8649 PR udp len 20 96 OUT multicast
ipmon[765]: 00:01:09.702391 5x bge0 @0:18 p 137.222.187.221,10280 -> 239.2.11.71,8649 PR udp len 20 92 OUT multicast
ipmon[765]: 00:01:24.062025 7x bge0 @0:18 p 137.222.187.221,10280 -> 239.2.11.71,8649 PR udp len 20 92 OUT multicast

I don't understand why these packets are not
sent via rule 14. Is rule 14 not matched?
Or I'm missing someting else?

many thanks
anton

-- 
Anton Shterenlikht
Room 2.6, Queen's Building
Mech Eng Dept
Bristol University
University Walk, Bristol BS8 1TR, UK
Tel: +44 (0)117 331 5944
Fax: +44 (0)117 929 4423



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20100518122852.GA6441>