Subject: Re: bin/30400: ipf log dup-to bug
To: None <gnats-admin@netbsd.org, netbsd-bugs@netbsd.org>
From: Bernd Ernesti <netbsd@lists.veego.de>
List: netbsd-bugs
Date: 06/11/2005 22:31:02
The following reply was made to PR bin/30400; it has been noted by GNATS.
From: Bernd Ernesti <netbsd@lists.veego.de>
To: Patrick Welche <prlw1@newn.cam.ac.uk>
Cc: gnats-bugs@NetBSD.org
Subject: Re: bin/30400: ipf log dup-to bug
Date: Sun, 12 Jun 2005 00:26:20 +0200
On Sat, Jun 11, 2005 at 11:12:27PM +0100, Patrick Welche wrote:
[..]
> IMO there are many work arounds, but at worst the documentation needs
> clarification. Nowhere does it say that "log" is different from "pass" or
> "block" as an action. (cf BNF - log is an action as in my rule as well
> as an option as in your rule)
RTFM.
To quote the part which you missed again:
.. and has no effect on whether the packet will be allowed through the filter.
> It may well be that my rule is not expected to work. However, that would
> "expected by the author" as opposed to "expected by someone who read the
> man pages".
I'm closing the pr now.
It is as designed and written in the manpage.
log as an action just does logging and nothing more.
Bernd