> -----Original Message----- > From: [EMAIL PROTECTED] > hmmm, are you using "return-*" with "out" rules or just "in" rules ? > > I'm trying to replicate this problem, but so far, there's no evidence > of leaking packets with just these rules: > > # ipfstat -hio > empty list for ipfilter(out) > 2599757 block return-icmp in proto icmp from any to any > 270980 block return-rst in proto tcp from any to any port 9000 >< 9999 > > If you could monitor this problem by doing: > vmstat -m > netstat -m > ipfstat >
Hi I did not see any mention about OS, but here is something what I have to say. I am using Solaris 9 on sparc. When ipfilter 4.x was released I wanted to compile it myself. I downloaded trial versions of Sun one studio. At that time there was Early Access 1 version of it. Ipf and pfil did compile fine and it did work fine for a several days. Sometimes computer just crashed. Total lock out, no console, nothing. Only reboot did bring it back to life. After first crash, crashes began to be more recent. Same crash scenarios with every 4.x ipf version and EA2 and final Studio 9 compiler. Still 3.4.x version worked fine with Studio 9 compiler. For a few days back I did try Studio 8 and it did compile ipf 4.1.3 and pfil 2.1.4 fine and it even did make solaris package 100KB smaller. My point is that somehow Studio 9 is not good to compile ipfilter. Use Studio 8. All Studio version what I did use were trial versions. I haven�t seen any discussion about this topic, but if this already has been discussed excuse me. Regards -Esa
