Hello,
I have the following rule in /etc/ipf/ipf.conf:
block in quick on e1000g0 to e1000g1 proto udp from any to any port 6000 >< 6010
after it there is "pass in all", and there are no rules except these two rules.
I have an applcation which sends UDP packets on port 6000
from a different machine to the machine on which this ipf rule is running.
e1000g0 has the following ip address: 192.168.0.28
and e1000g1 has the following ip address: 192.168.0.29
The UDP packets are sent to 192.168.0.28.
As I understand, accordng to this rule I should have see these packets on
e1000g1 (192.168.0.29) ; However, running on that machine
snoop -d e1000g0 shows these pacekets
but snoop -d e1000g1 does NOT ; any idea what can be the problem ?
running ipf -V shoes that ipf is running.
and also ifconfig -a |grep e1000g1
e1000g1: flags=201100843<UP,BROADCAST,RUNNING,MULTICAST,ROUTER,IPv4,CoS>
mtu 1500 index 3
which means that e1000g1 is UP and RUNNING
Any ideas what can be the problem?
Ian
|