Ipfw on the fritz?

Josh Paetzel friar_josh at webwarrior.net
Wed Sep 17 17:54:32 PDT 2003


On Thu, Sep 18, 2003 at 12:21:58AM +0000, Mark wrote:
> Eek, I just got these eery messages in /var/log/messages:
> 
> Sep 18 02:00:18 asarian-host /kernel: OUCH! cannot remove rule, count 1
> Sep 18 02:00:18 asarian-host /kernel: OUCH! cannot remove rule, count 1
> Sep 18 02:00:18 asarian-host /kernel: OUCH! cannot remove rule, count 2
> Sep 18 02:00:18 asarian-host /kernel: OUCH! cannot remove rule, count 2
> Sep 18 02:00:18 asarian-host /kernel: OUCH! cannot remove rule, count 1
> Sep 18 02:00:18 asarian-host /kernel: OUCH! cannot remove rule, count 1
> 
> That does not look good. :( I run FreeBSD 4.7R. Today I added a few rules
> using "limit src-addr". Could that be it? And what does it mean? Are some
> rules broken after this? I never had this happen before. Why would ipfw even
> want to remove rules?
> 
> Baffled & Concerned,
> 
> - Mark
> 

The following thread may be of interest to you:

http://lists.freebsd.org/pipermail/freebsd-ipfw/2003-June/000215.html

Josh Paetzel


More information about the freebsd-questions mailing list