Re: ipfw -- selecting locally generated packets

2018-05-05 Thread Julian Elischer
On 5/5/18 1:33 am, Jeff Kletsky wrote: On 5/3/18 6:35 AM, Julian Elischer wrote: On 3/5/18 12:08 am, Michael Sierchio wrote: On Mon, Apr 30, 2018 at 10:48 AM, Jeff Kletsky wrote: "not recv any" doesn't seem to be helpful either $ sudo ipfw add 64000 count ip from any to any out xmit

Re: ipfw -- selecting locally generated packets

2018-05-04 Thread Jeff Kletsky
On 5/3/18 6:35 AM, Julian Elischer wrote: On 3/5/18 12:08 am, Michael Sierchio wrote: On Mon, Apr 30, 2018 at 10:48 AM, Jeff Kletsky wrote: "not recv any" doesn't seem to be helpful either $ sudo ipfw add 64000 count ip from any to any out xmit any not recv any The loopback inter

Re: ipfw -- selecting locally generated packets

2018-05-03 Thread Julian Elischer
On 3/5/18 12:08 am, Michael Sierchio wrote: On Mon, Apr 30, 2018 at 10:48 AM, Jeff Kletsky wrote: "not recv any" doesn't seem to be helpful either $ sudo ipfw add 64000 count ip from any to any out xmit any not recv any The loopback interface, lo0 ?

Re: ipfw -- selecting locally generated packets

2018-05-02 Thread Michael Sierchio
On Mon, Apr 30, 2018 at 10:48 AM, Jeff Kletsky wrote: > > "not recv any" doesn't seem to be helpful either > > $ sudo ipfw add 64000 count ip from any to any out xmit any not recv > any The loopback interface, lo0 ? ___ freebsd-net@freebsd.org mai

Re: ipfw -- selecting locally generated packets

2018-05-01 Thread Aleksandr A Babaylov
On Tue, May 01, 2018 at 09:04:36PM +0800, Julian Elischer wrote: > On 1/5/18 2:02 am, Eugene Grosbein wrote: > >01.05.2018 0:48, Jeff Kletsky wrote: > > > >> From time to time, I rewrite my firewall rules to take advantages of the > >> ever-improving set of features that ipfw provides. One of the

Re: ipfw -- selecting locally generated packets

2018-05-01 Thread Julian Elischer
On 1/5/18 2:02 am, Eugene Grosbein wrote: 01.05.2018 0:48, Jeff Kletsky wrote: From time to time, I rewrite my firewall rules to take advantages of the ever-improving set of features that ipfw provides. One of the challenges I have faced in the past was selecting packets that are generated o

Re: ipfw -- selecting locally generated packets

2018-04-30 Thread Eugene Grosbein
01.05.2018 0:48, Jeff Kletsky wrote: > From time to time, I rewrite my firewall rules to take advantages of the > ever-improving set of features that ipfw provides. One of the challenges I > have faced in the past was selecting packets that are generated on the > firewall host itself, as oppose