kern/123358: [ipfw] ipfw add 1000 allow IP from any to any doesn't work

[Edwin Groothuis]

>Number:         123358
>Category:       kern
>Synopsis:       [ipfw] ipfw add 1000 allow IP from any to any doesn't work
>Confidential:   no
>Severity:       non-critical
>Priority:       low
>Responsible:    freebsd-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Sat May 03 06:40:00 UTC 2008
>Closed-Date:
>Last-Modified:
>Originator:     Edwin Groothuis
>Release:        FreeBSD 6.3-RELEASE i386
>Organization:
-
>Environment:
System: FreeBSD k7.mavetju 6.3-RELEASE FreeBSD 6.3-RELEASE #0: Sun Feb 17 22:11:52 EST 2008 edwin at k7.mavetju:/usr/src/sys/i386/compile/SMP i386

>Description:

Loading an ipfw rule with "IP" instead of "ip" will enter the rule
properly in the list, but it never gets matched.

>How-To-Repeat:

    [/home/edwin] root at k7>ipfw add 100 allow IP from any to any
    00100 allow ip from any to any
    [/home/edwin] root at k7>ipfw add 100 allow ip from any to any
    00100 allow ip from any to any

    [/home/edwin] root at k7>ipfw -a list
    00100   0      0 allow ip from any to any
    00100 922 168617 allow ip from any to any
    65535 182  20023 deny ip from any to any

The first entry should be increasing, not the second.

>Fix:

>Release-Note:
>Audit-Trail:
>Unformatted: