I'm configuring the FreeBSD firewall and have such situation:
51000 pipe tablearg ip from not table(17) to table(20) out xmit ng* 51010 pipe tablearg ip from table(21) to not table(17) in recv ng* 51020 pipe tablearg ip from any to table(18) out xmit ng* 51030 pipe tablearg ip from table(19) to any in recv ng*
21 have client IP addresses and pipe numbers;
table 17 - list of networks.
51030 work fine but what is going on at
How to determine firewall to take pipe number from tables
21 - not from