Solved Does it work?

[Харбин Хэйлунцзян]

I've had a few month's intermission in dealing with FreeBSD. Yesterday upgraded to 15.1 and IPFW doesn't block what it is expected to, what it used to block some months ago.

I have this rule:

# HTTP blocking
ipfw -q add 00200 deny tcp from 'table(BT0)' to 192.168.1.17 80 in via re0

My service requests blocking 192.168.1.13, my blocking service calls ipfw, the address gets into the table:

# ipfw table BT0 list
192.168.1.13/32 0

But it isn't blocked - the service continues getting them requests from this address.

 

[SirDice]

But it isn't blocked - the service continues getting them requests from this address.

It will only block new connections, connections that already have a state will continue to pass.

 

[Харбин Хэйлунцзян]

It will only block new connections, connections that already have a state will continue to pass.

It used to block every tcp packet and it does it now. After I have restarted it.

 

[SirDice]

After I have restarted it.

That flushed your state table.