From owner-freebsd-ipfw Tue Oct 22 12:26:35 2002 Delivered-To: freebsd-ipfw@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 95CA237B401 for ; Tue, 22 Oct 2002 12:26:33 -0700 (PDT) Received: from smurf.jnielsen.net (12-254-140-119.client.attbi.com [12.254.140.119]) by mx1.FreeBSD.org (Postfix) with ESMTP id 655CB43E42 for ; Tue, 22 Oct 2002 12:26:32 -0700 (PDT) (envelope-from john@jnielsen.net) Received: from buff.local (buff.local [192.168.0.10]) by smurf.jnielsen.net (8.12.6/8.12.6) with ESMTP id g9MJsNxo051546 for ; Tue, 22 Oct 2002 13:54:23 -0600 (MDT) (envelope-from john@jnielsen.net) Content-Type: text/plain; charset="us-ascii" From: John Nielsen To: ipfw@freebsd.org Subject: skip past end of rules Date: Tue, 22 Oct 2002 13:30:38 -0600 User-Agent: KMail/1.4.3 MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable Message-Id: <200210221330.38113.john@jnielsen.net> Sender: owner-freebsd-ipfw@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG I'm seeing the following message repeatedly on a 4.7-R box using IPFW2: +++ ipfw: ouch!, skip past end of rules, denying packet Some points of interest: I don't have any skipto rules in my ruleset. The same ruleset worked without complaining under 4.6.2-R. (I haven't made any ipfw2-dependent changes yet). The firewall appears to be functioning properly despite the messages. The firewall serves a very network, yet the message has only shown up ~50= =20 times in the past 24 hours. (It appears more frequently during times of=20 high network usage). I am using dummynet pipes for bandwidth limiting. net.inet.ip.fw.one_pass is set to 0. This obviously isn't a show-stopper, but it is a bit worrisome. I'd like= to=20 know if this is a known bug or if I should submit a PR on it. I'd also=20 like to isolate the problem a bit better, but I need some suggestions on=20 how to do so. Thanks, JN To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-ipfw" in the body of the message