Jin Guojun [VFFS] wrote:
I am not sure if this is a bug or is there some limitation for total
deny entry,
when the deny list exceeds a certain length (36 lines at this case),
ipfw stop working (see the *** line below).
# ipfw list
...all non deny entries are removed
00361 deny ip from 202.124.17.215 to any
...
00364 deny ip from 71.135.96.85 to any
00364 deny ip from 71.135.41.68 to any
00364 deny ip from 71.135.35.252 to any
00364 deny ip from 71.135.178.215 to any
First, try an ipfw logging rules for each rule
and at the end of rules.
Second, you can use ipfw tables and replace
all your rules with one.
--
WBR, Andrey V. Elsukov
_______________________________________________
[email protected] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw
To unsubscribe, send any mail to "[EMAIL PROTECTED]"
