IPFW ipfw skips blocked addresses

[kerogaz]

ipfw rules:
00106 6969 668555 deny ip from 104.0.0.0/8 to me



rinetd.log:
17/Apr/2024:09:35:28 104.196.54.86

 

[Hiroo Ono]

If there are other rules of number younger than 106, check if it does not pass that packet.

 

[kerogaz]

Everything is fine with the placement of lines in the rules. In general, this happens sometimes, not systematically.The firewall reflects 99.9 percent of prohibited IPs. I'm interested in why this happens. The firewall was breached twice today.Maybe due to continuous attacks with a very high frequency, the firewall does not work?

 

[smithi]

The firewall was breached twice today.Maybe due to continuous attacks with a very high frequency, the firewall does not work?

In a [code] block, obscuring what you need to, show us the result of:

# ipfw -t show

and describe which interface connects to upstream router, and what produces rinetd.log