>Number:         7755
>Category:       bin
>Synopsis:       ipf -Fa -E leaves old rules in place
>Confidential:   no
>Severity:       non-critical
>Priority:       medium
>Responsible:    bin-bug-people (Utility Bug People)
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Thu Jun 10 18:20:00 1999
>Last-Modified:
>Originator:     Ian Dall
>Organization:
	
>Release:        <NetBSD-current source date> 1.4C
>Environment:
	
System: NetBSD sibyl.beware.dropbear.id.au 1.4C NetBSD 1.4C (SIBYL) #1: Tue Jun 1 15:34:02 CST 1999 ian@sibyl.chez-dall.org.au:/usr3/netbsd-1.2/lsrc/sys/arch/pc532/compile/SIBYL pc532


>Description:
	
ipf -Fa doesn't seem to work as evidenced by various routes remaining
blocked. Also ipstat -i and ipstat -o report no rules both before
and after the flush making it useless to diagnose this problem (or many
others).

>How-To-Repeat:
	
Install restrictive filter.
Run ipmon
note blocked packets logged
do:
 ipf -D
 ipf -Fa -E
note more blocked packets logged
 
>Fix:
	
>Audit-Trail:
>Unformatted: