From edwin@mavetju.org  Sat May  3 06:28:15 2008
Return-Path: <edwin@mavetju.org>
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 7DA881065670
	for <FreeBSD-gnats-submit@freebsd.org>; Sat,  3 May 2008 06:28:15 +0000 (UTC)
	(envelope-from edwin@mavetju.org)
Received: from mail5out.barnet.com.au (mail5.barnet.com.au [202.83.178.78])
	by mx1.freebsd.org (Postfix) with ESMTP id 4871C8FC1B
	for <FreeBSD-gnats-submit@freebsd.org>; Sat,  3 May 2008 06:28:15 +0000 (UTC)
	(envelope-from edwin@mavetju.org)
Received: by mail5out.barnet.com.au (Postfix, from userid 1001)
	id A017A2218994; Sat,  3 May 2008 16:28:13 +1000 (EST)
Received: from mail5auth.barnet.com.au (mail5.barnet.com.au [202.83.178.78])
	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
	(Client CN "mail5auth.barnet.com.au", Issuer "*.barnet.com.au" (verified OK))
	by mail5.barnet.com.au (Postfix) with ESMTP id 65E3F21B240C
	for <FreeBSD-gnats-submit@freebsd.org>; Sat,  3 May 2008 16:28:13 +1000 (EST)
Received: from k7.mavetju (k7.mavetju.org [10.251.1.18])
	by mail5auth.barnet.com.au (Postfix) with ESMTP id 1CFBB2218804
	for <FreeBSD-gnats-submit@freebsd.org>; Sat,  3 May 2008 16:28:13 +1000 (EST)
Received: by k7.mavetju (Postfix, from userid 1001)
	id D53D4314; Sat,  3 May 2008 16:28:12 +1000 (EST)
Message-Id: <20080503062812.D53D4314@k7.mavetju>
Date: Sat,  3 May 2008 16:28:12 +1000 (EST)
From: Edwin Groothuis <edwin@mavetju.org>
Reply-To: Edwin Groothuis <edwin@mavetju.org>
To: FreeBSD-gnats-submit@freebsd.org
Cc:
Subject: [ipfw] ipfw add 1000 allow IP from any to any doesn't work
X-Send-Pr-Version: 3.113
X-GNATS-Notify:

>Number:         123357
>Category:       ports
>Synopsis:       [ipfw] ipfw add 1000 allow IP from any to any doesn't work
>Confidential:   no
>Severity:       non-critical
>Priority:       low
>Responsible:    freebsd-ports-bugs
>State:          closed
>Quarter:        
>Keywords:       
>Date-Required:  
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Sat May 03 06:30:02 UTC 2008
>Closed-Date:    Sat May 03 06:31:25 UTC 2008
>Last-Modified:  Sat May 03 06:31:25 UTC 2008
>Originator:     Edwin Groothuis
>Release:        FreeBSD 6.3-RELEASE i386
>Organization:
-
>Environment:
System: FreeBSD k7.mavetju 6.3-RELEASE FreeBSD 6.3-RELEASE #0: Sun Feb 17 22:11:52 EST 2008 edwin@k7.mavetju:/usr/src/sys/i386/compile/SMP i386


>Description:

Loading an ipfw rule with "IP" instead of "ip" will enter the rule
properly in the list, but it never gets matched.

>How-To-Repeat:

    [/home/edwin] root@k7>ipfw add 100 allow IP from any to any
    00100 allow ip from any to any
    [/home/edwin] root@k7>ipfw add 100 allow ip from any to any
    00100 allow ip from any to any

    [/home/edwin] root@k7>ipfw -a list
    00100   0      0 allow ip from any to any
    00100 922 168617 allow ip from any to any
    65535 182  20023 deny ip from any to any

The first entry should be increasing, not the second.

>Fix:
>Release-Note:
>Audit-Trail:
State-Changed-From-To: open->closed 
State-Changed-By: edwin 
State-Changed-When: Sat May 3 06:31:12 UTC 2008 
State-Changed-Why:  
Not a port. 

http://www.freebsd.org/cgi/query-pr.cgi?pr=123357 
>Unformatted:
