Subject: bin/7755: ipf does not flush filter rules
To: None <>
From: Ian Dall <>
List: netbsd-bugs
Date: 06/10/1999 18:23:55
>Number:         7755
>Category:       bin
>Synopsis:       ipf -Fa -E leaves old rules in place
>Confidential:   no
>Severity:       non-critical
>Priority:       medium
>Responsible:    bin-bug-people (Utility Bug People)
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Thu Jun 10 18:20:00 1999
>Originator:     Ian Dall
>Release:        <NetBSD-current source date> 1.4C
System: NetBSD 1.4C NetBSD 1.4C (SIBYL) #1: Tue Jun 1 15:34:02 CST 1999 pc532

ipf -Fa doesn't seem to work as evidenced by various routes remaining
blocked. Also ipstat -i and ipstat -o report no rules both before
and after the flush making it useless to diagnose this problem (or many

Install restrictive filter.
Run ipmon
note blocked packets logged
 ipf -D
 ipf -Fa -E
note more blocked packets logged