Dmitry A. Bondareff wrote:
Hello hackers!

Today I upgraded my 5.2.1-p11 box up to 5.3-p2.
My firewall rules includes like this:
...
/sbin/ipfw add tee 10000 ip from 1.2.3.4 to 4.3.2.1
...
On 5.2.1-FreeBSD it's works fine.
But FreeBSD 5.3 halted each time!!!

After changed "tee 10000" to "allow"  now works all fine.

Is this bug ??

No. It was a bug before. 'tee' now behaves as it should and your packet gets copied and delivered to the divert socket and it continues with the next rule. Prior to 5.3 it was terminating the rule processing and accepting the packet the moment the 'tee' action was hit.

--
Andre
_______________________________________________
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-hackers
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Reply via email to