ipfw & skipto.... confused a bit...

[Ian FREISLICH]

"Chris Knipe" wrote:
> Hi all,
> 
> I'm a tad confused with skiptos.  I want to use them, because I am
> automating setup procedures of rather large firewall tables via perl /
> mysql.  From the 65535 available rules, blocks have been reserved for
> certain type of functions during the firewalling process.  As such, I
> basically use all the available numbers.  My last automated block is from
> 65450 to 65500 :/
> 
> Let's have a look quickly at a small block so that I can have a example of
> what I am referring to....
> 
>  #######################################################################
>  #### Transparent Services                                           ###
>  #######################################################################
>  ${fwcmd} add 16000 allow tcp from ${LANIP} to any 25 out via tun1 skipto
> 16010

I thought that you had to use skipto as the action, not the rule body:

${fwcmd} add 16000 skipto 16010 tcp from ${LANIP} to any 25 out via tun1

Ian

--
Ian Freislich