Duplicate IPFW rules

Václav Haisman V.Haisman at sh.cvut.cz
Thu Dec 21 11:53:28 PST 2006



Kevin Downey wrote, On 21.12.2006 20:44:
> 
> 
> On 12/21/06, *Václav Haisman* <V.Haisman at sh.cvut.cz
> <mailto:V.Haisman at sh.cvut.cz>> wrote:
> 
>     Hi,
>     I have just noticed that ipfw list shows one rule twice. It could be
>     that I
>     have run a script that adds it twice:
> 
>     shell::root:~> ipfw list
>     00100 allow ip from any to any via lo0
>     00200 deny ip from any to 127.0.0.0/8 <http://127.0.0.0/8>
>     00300 deny ip from 127.0.0.0/8 <http://127.0.0.0/8> to any
>     01999 deny ip from table(1) to any
>     01999 deny ip from table(1) to any
>     65000 allow ip from any to any
>     65535 allow ip from any to any
> 
>     Shouldn't IPFW check before adding the same rule number again?
> 
>     This is FreeBSD 6.1 RC1 with quite recent kernel.
> 
>     --
>     Vaclav Haisman
> 
> 
> 
> 
> its a feature, not a bug.
> 
Huh, really? How is it useful? Please, explain.

--
VH

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 542 bytes
Desc: OpenPGP digital signature
Url : http://lists.freebsd.org/pipermail/freebsd-stable/attachments/20061221/8155acd4/signature.pgp


More information about the freebsd-stable mailing list