Запустил ipa с конфигом

global {
update_db_time = 10s
db_dir= /var/ipa
}
rule SEVERSK {
ipfw = 1092
update_db_time = 10s
append_db_time = 10s
info = Traffic to SEVERSK
limit LIMIT {
byte_limit = 1T
startup {
exec = /sbin/ipfw del 1092 1093 1094
exec = /sbin/ipfw add 1092 count all from any to 192.168.0.1 in via gif1
exec = /sbin/ipfw add 1093 allow all from 192.168.0.1 to any via gif1
exec = /sbin/ipfw add 1094 allow all from any to 192.168.0.1  via gif1
}
shutdown {
exec = /sbin/ipfw del 1092 1093 1094
}
reach {
}
expire {
expire_time = +m
}
}
}

IPA запустилась все оки.

в ipfw sh

01092       2300     618748 count ip from any to 192.168.0.1 in via gif1
01093       3234    1011208 allow ip from 192.168.0.1 to any via gif1
01094       2299     618708 allow ip from any to 192.168.0.1  via gif1

Счетчики считают.

НО /var/ipa/SEVERSK/2004/03

01/13:27:10-13:27:20 00000000000000000000
01/13:27:20-13:27:30 00000000000000000000
01/13:27:30-13:27:40 00000000000000000000
01/13:27:40-13:27:50 00000000000000000000
01/13:27:50-13:28:00 00000000000000000000
01/13:28:00-13:28:10 00000000000000000000
01/13:28:10-13:28:20 00000000000000000000
01/13:28:20-13:28:30 00000000000000000000
01/13:28:30-13:28:40 00000000000000000000
01/13:28:40-13:28:50 00000000000000000000

Нихера понять не могу.

и в ipa.log валится такая вот хренатень

a[57131]: ------------------------------------------------
a[57131]: IPA: version 1.3.6 started by UID 0 GID 0
a[57131]: current umask is 0227
a[57131]: use configuration file /usr/local/etc/ipa.conf, parsing...
a[57131]: file /usr/local/etc/ipa.conf is readable by group and/or other users
a[57131]: loaded 1 accounting rule
a[57131]: umask is changed 0227 -> 0222
a[57131]: creating main database directory /var/ipa
a[57131]: umask is changed 0222 -> 0227
a[57131]: umask is changed 0227 -> 0222
a[57131]: creating database lock file /var/ipa/lock db
a[57131]: umask is changed 0222 -> 0227
a[57131]: creating rule directory /var/ipa/SEVERSK
a[57131]: creating directory for rule SEVERSK, limit LIMIT
a[57131]: preinit IPv4 Firewall support
a[57131]: rule SEVERSK, limit LIMIT (startup): run commands
a[57131]: make IP accounting...
a[57131]: rule SEVERSK: 1092.0 doesn't exist in IPFW kernel table

Получается она правило чтоли это найти не может?

Никто с таким не встречался? Помогите, а то уже двое суток без внешки клиенты сидят.