ipfilter on 6.1

J.D. Bronson jbronson at wixb.com
Sat Aug 26 21:05:24 UTC 2006


At 03:40 PM 8/26/2006, Giorgos Keramidas wrote:

>Don't show us the ipf.conf file you are using, but the output of:
>
>     % ipfstat -hni
>     % ipfstat -hno
>
>Then we can really know what rules you have loaded in IP Filter.


# ipfstat -hni
2 @1 pass in quick on bge0 all keep state keep frags

# ipfstat -hno
1 @1 pass out quick on bge0 all keep state keep frags
1 @2 pass out quick on tun0 proto tcp from any to any flags S/FSRPAU 
keep state keep frags
1 @3 pass out quick on tun0 proto udp from any to any keep state keep frags
0 @4 pass out quick on sppp0 proto icmp from any to any keep state keep frags


...they seem to match exactly.




More information about the freebsd-questions mailing list