Duplicate IPFW rules
Václav Haisman
V.Haisman at sh.cvut.cz
Thu Dec 21 11:53:28 PST 2006
Kevin Downey wrote, On 21.12.2006 20:44:
>
>
> On 12/21/06, *Václav Haisman* <V.Haisman at sh.cvut.cz
> <mailto:V.Haisman at sh.cvut.cz>> wrote:
>
> Hi,
> I have just noticed that ipfw list shows one rule twice. It could be
> that I
> have run a script that adds it twice:
>
> shell::root:~> ipfw list
> 00100 allow ip from any to any via lo0
> 00200 deny ip from any to 127.0.0.0/8 <http://127.0.0.0/8>
> 00300 deny ip from 127.0.0.0/8 <http://127.0.0.0/8> to any
> 01999 deny ip from table(1) to any
> 01999 deny ip from table(1) to any
> 65000 allow ip from any to any
> 65535 allow ip from any to any
>
> Shouldn't IPFW check before adding the same rule number again?
>
> This is FreeBSD 6.1 RC1 with quite recent kernel.
>
> --
> Vaclav Haisman
>
>
>
>
> its a feature, not a bug.
>
Huh, really? How is it useful? Please, explain.
--
VH
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 542 bytes
Desc: OpenPGP digital signature
Url : http://lists.freebsd.org/pipermail/freebsd-stable/attachments/20061221/8155acd4/signature.pgp
More information about the freebsd-stable
mailing list