IPFILTER 'again' ?

[Norberto Meijome]

Stephan Weaver wrote:
> Hello,
> 
> I notice this in my /var/log/ipfilter.log.
> 23/06/2005 10:36:06.691347 vr0 @0:29 b 196.3.132.4,53 -> 
> 192.168.1.1,61827 PR udp len 20 66 IN
> 23/06/2005 10:36:07.652341 vr0 @0:29 b 196.3.132.4,53 -> 
> 192.168.1.1,61828 PR udp len 20 70 IN

which one is rule #29? ( ipfstat -ion ). that's the one that's hitting 
to get blocked.

FWIW, my counting from the top (skipping comments) is

> block in log first quick on vr0 proto tcp all flags U/SFRAU

... i cant make much sense of this (no surprises there :-D), tcp rule 
blocking udp...so I'm pretty certain I'm wrong in something obvious.

cheers,
beto