ipfw delete 100-300

[Ian Smith]

On Thu, 13 Aug 2015 16:30:15 +0200, Luigi Rizzo wrote:
 > On Thu, Aug 13, 2015 at 4:00 PM, Ian Smith <smithi at nimnet.asn.au> wrote:
 > > On Thu, 13 Aug 2015 12:24:31 +0800, Julian Elischer wrote:
 > >  > BTW, any ideas as to what causes this?
 > >  > # ipfw show
 > >  > [...]
 > >  > 00400      0                    0 deny ip from 10.12.1.0/24 to any in recv
 > >  > xn0
 > >  > 00500      0 16045693110842147038 deny ip from 204.109.63.0/25 to any in recv
 > >  > xn1
 > >  > 00600      0                    0 allow ip from any to any in recv xn1
 > >  > [...]
 > >  > 65535   8251 16045693110842147290 deny ip from any to any
 > >  >
 > >  >
 > >  > -current as of the 5th of august
 > >  > FreeBSD vps1.elischer.org 11.0-CURRENT FreeBSD 11.0-CURRENT #1 r286304: Wed
 > >  > Aug  5 14:31:10 PDT 2015
 > >  > root at vps1.elischer.org:/usr/obj/usr/src-current/sys/VPS1  i386
 > >  >
 > >  > note i386, not amd64.
 > >
 > > Assuming all digits were shown, on a wild hunch:
 > >
 > > t23% echo 'scale=20; 2^64 - 16045693110842147038' | bc
 > > 2401050962867404578
 > > t23% echo 'scale=20; 2^63 - 16045693110842147038' | bc
 > > -6822321073987371230
 > >
 > 
 >  bc
 > obase=16
 > 16045693110842147038
 > DEADC0DEDEADC0DE
 > 
 > so... somehow pointing in a bad place.

Ah, quite so .. and rule 65535 looks like a slightly worse place.

t23% echo 'obase=16; 16045693110842147290' | bc
DEADC0DEDEADC1DA

thanks, Ian