From owner-freebsd-questions  Wed Apr 28 21:45:19 1999
Delivered-To: freebsd-questions@freebsd.org
Received: from mail.rdc1.bc.home.com (ha1.rdc1.bc.wave.home.com [24.2.10.66])
	by hub.freebsd.org (Postfix) with ESMTP id A6CAA15511
	for <freebsd-questions@FreeBSD.ORG>; Wed, 28 Apr 1999 21:45:16 -0700 (PDT)
	(envelope-from hjcs@home.com)
Received: from home.com ([24.113.114.44]) by mail.rdc1.bc.home.com
          (InterMail v4.00.03 201-229-104) with ESMTP
          id <19990429044516.EHHM24551.mail.rdc1.bc.home.com@home.com>;
          Wed, 28 Apr 1999 21:45:16 -0700
Message-ID: <3727E51B.6B0C7935@home.com>
Date: Wed, 28 Apr 1999 21:50:40 -0700
From: Christoff Snijders <hjcs@home.com>
Reply-To: hjcs@home.com
X-Mailer: Mozilla 4.51 (Macintosh; I; PPC)
X-Accept-Language: en
MIME-Version: 1.0
To: Andrew Johns <A_Johns@TurnAround.com.au>
Cc: Guy Helmer <ghelmer@scl.ameslab.gov>,
	freebsd-questions@FreeBSD.ORG
Subject: Re: ipfw rules
References: <Pine.SGI.4.10.9904281932230.4039-100000@demios.scl.ameslab.gov> <3727B56C.2D8D0ED1@home.com> <3727D06A.23DECCAA@TurnAround.com.au>
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.ORG

Andrew Johns wrote:
> 

[snip]

> 
> What you could try is to enable logging - when I was unsure of what
> was happening, I retained the existing rules that I was using and
> added a rule such as:
> ipfw add 65530 deny log all from any to any

[snip]

Great idea!  I did this, but now my problem is that I don't know how to
interpret the output, or what I should do about what I see.

There are only two entries in the log file, repeated 50 times each,
before the logger stops for that rule. The entries read:

Apr 28 21:13:15 hostname /kernel: ipfw: 63000 Deny UDP 0.0.0.0:68
255.255.255.255:67 in via ed2
Apr 28 21:13:15 hostname /kernel: ipfw: 63000 Deny UDP 123.456.78.123:68
255.255.255.255:67 in via ed2
Apr 28 21:13:15 hostname /kernel: ipfw: limit reached on rule #63000

I don't really know what this means, but I tried adding the following
rules in the appropriate place in the rule set, but they did not work.
Assume that my IP address is 111.111.111.111:

ipfw add allow udp from 0.0.0.0 to 111.111.111.111 in via ed2
ipfw add allow udp from 123.456.78.123 to 111.111.111.111 in via ed2

Any thoughts?

Thanks,
Christoff.


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message