Re: ipfw dynamic tcp rule issue

2004-09-08 Thread George S
Hi Ian, --- Ian FREISLICH <[EMAIL PROTECTED]> wrote: > George S wrote: > > Hi Ian, > > > > Thanks for your response. > > > > Yes, the behaviour is exactly as I describe. What happens is that on its > way > > back, the SYN+ACK packet with DST IP/P

Re: ipfw dynamic tcp rule issue

2004-09-07 Thread George S
finds itself on the fxp0 wire. I will give your check-state suggestion a try but I think the check-state is implicit within rule #1. Kindest regards, George --- Ian FREISLICH <[EMAIL PROTECTED]> wrote: > George S wrote: > > Hello all, > > > > I've been havin

ipfw dynamic tcp rule issue

2004-09-06 Thread George S
Hello all, I've been having some trouble with this strange ipfw configuration and I am pretty sure it is probably a bug. I posted a note to freebsd-ipfw a little while ago, but I think the problem is better demonstrated with a figure. http://www.geocities.com/c0sine/fbsdipfw.gif";> http://www.geo