Subject: Re: odd ipf behaviour
To: Paul Newhouse <email@example.com>
From: David Maxwell <firstname.lastname@example.org>
Date: 12/02/1999 09:56:25
On Wed, Dec 01, 1999 at 09:19:07PM -0800, Paul Newhouse wrote:
> >You have no ipf rules to force 220.127.116.11 traffic back out ne0.
> This rule:
> pass out log quick on de1 to ne0 from 18.104.22.168 to any
> seems to work for forcing the packets that came in on ne0 back out ne0
> for other addresses.
That's a very interesting rule that I'll have to examine in more
detail. Without my TCP Illustrated V2 in front of me though, I
can't say for sure which behaviour that will provide.
> The packets don't show up on any interface!? I don't get it, where do these
> packets go? This is weigh/whey/way to weird!! ;(
There are some interesting combinations when multiple packet filters
get installed in different sequences. I'll ask the resident expert.
> This worked on the previous kernel (3-4 months old) this newer kernel is
> strange. Except fo ip6 it's config'd in the same way.
Ahh. That's key - a change in behaviour vs not working in a new setup.
David Maxwell, email@example.comfirstname.lastname@example.org -->
(About an Amiga rendering landscapes) It's not thinking, it's being artistic!
- Jamie Woods