ipfilter rules question

Anton Shterenlikht mexas at bristol.ac.uk
Tue May 18 12:28:56 UTC 2010


I'm using ipfilter on -current.

Here's a fragment of the outgoing rules:

# ipfstat -on

*skip*
@14 pass out quick on bge0 proto udp from any to any port = 8649 keep state
*skip*
@18 pass out log first quick on bge0 all


And I see these ipmon entries in /var/log/ipfilter.log:

ipmon[765]: 00:01:04.242290 bge0 @0:18 p 137.222.187.221,10280 -> 239.2.11.71,8649 PR udp len 20 96 OUT multicast
ipmon[765]: 00:01:09.702391 5x bge0 @0:18 p 137.222.187.221,10280 -> 239.2.11.71,8649 PR udp len 20 92 OUT multicast
ipmon[765]: 00:01:24.062025 7x bge0 @0:18 p 137.222.187.221,10280 -> 239.2.11.71,8649 PR udp len 20 92 OUT multicast

I don't understand why these packets are not
sent via rule 14. Is rule 14 not matched?
Or I'm missing someting else?

many thanks
anton

-- 
Anton Shterenlikht
Room 2.6, Queen's Building
Mech Eng Dept
Bristol University
University Walk, Bristol BS8 1TR, UK
Tel: +44 (0)117 331 5944
Fax: +44 (0)117 929 4423


More information about the freebsd-questions mailing list