Re: FreeBSD11 ipfw sets.

2018-02-13 Thread dam...@damianek.be
2018-02-13 13:35 GMT+01:00 Andrey V. Elsukov :

> On 13.02.2018 14:14, dam...@damianek.be wrote:
> > Now same on 11.1-RELEASE-p4 amd64 amd64 1101001 - generic kernel
> > with ipfw_load="YES" in /boot/loader.conf
> >
> > :~ # ipfw add  count tcp from any to any 22
> > 0 count tcp from any to any dst-port 22
> > :~ # ipfw show 
> > 0 19  1720 count tcp from any to any dst-port 22
> > :~ # ipfw set move rule  to 2
> > :~ # ipfw -S set 2 show
> > :~ # ipfw set 2 delete 
> > ipfw: rule  not found
> > ~ # ipfw delete 
> >
> > I'm doing some wrong, or bug?
>
> Hi,
>
> I think this should be fixed in freebsd11-stable.
>
> https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=224555


Thank you.


-- dsk
dam...@damianek.be
___
freebsd-ipfw@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-ipfw
To unsubscribe, send any mail to "freebsd-ipfw-unsubscr...@freebsd.org"


FreeBSD11 ipfw sets.

2018-02-13 Thread dam...@damianek.be
Hello

I have strange behavior using ipfw set's on FreeBSD11.

Working fine on 10.3-STABLE amd64 amd64 1003514 - customkernel with
options IPFIREWALL_VERBOSE
options IPFIREWALL_DEFAULT_TO_ACCEPT
options IPFIREWALL

:~# ipfw add  count tcp from any to any 22
0 count tcp from any to any dst-port 22
:~# ipfw show 
0  42   3184 count tcp from any to any dst-port 22
:~# ipfw set move rule  to 2
:~# ipfw -S set 2 show
# DISABLED 0 93 7036 set 2 count tcp from any to any dst-port 22
:~# ipfw set 2 delete 


Now same on 11.1-RELEASE-p4 amd64 amd64 1101001 - generic kernel
with ipfw_load="YES" in /boot/loader.conf

:~ # ipfw add  count tcp from any to any 22
0 count tcp from any to any dst-port 22
:~ # ipfw show 
0 19  1720 count tcp from any to any dst-port 22
:~ # ipfw set move rule  to 2
:~ # ipfw -S set 2 show
:~ # ipfw set 2 delete 
ipfw: rule  not found
~ # ipfw delete 

I'm doing some wrong, or bug?



-- dsk
dam...@damianek.be
___
freebsd-ipfw@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-ipfw
To unsubscribe, send any mail to "freebsd-ipfw-unsubscr...@freebsd.org"