Date: Tue, 16 Oct 2001 13:18:19 +0200 From: Bjarne Wichmann Petersen <mekanix@privat.dk> To: cjclark@alum.mit.edu, "Crist J. Clark" <cristjc@earthlink.net> Cc: freebsd-questions@FreeBSD.ORG Subject: Re: Firewall not logging Message-ID: <20011016111536.VWHS23247.fepA.post.tele.dk@there> In-Reply-To: <20011016020733.F293@blossom.cjclark.org> References: <20011016085031.ZUFR22989.fepB.post.tele.dk@there> <20011016020733.F293@blossom.cjclark.org>
next in thread | previous in thread | raw e-mail | index | archive | help
On Tuesday 16 October 2001 11:07, Crist J. Clark wrote: > > # Allow all data from my network card and localhost. Make sure you > > # change your network card (mine was fxp0) before you reboot. :) > > $fwcmd add allow ip from any to any via lo0 > > $fwcmd add allow ip from any to any via xl0 > > All traffic is being passed by these two rules. Neither of these rules > log. None of the log rules that are below this are ever reached. Hmm, I've got this from http://www.freebsd.org/doc/en_US.ISO8859-1/articles/dialup-firewall/rules.html with a few modifications. I'm not very well versed into ipfw, but I think the idea here is that trafic behind the wall should go unhindered. Should I substitue "via" with "out xmit" instead? Just commenting those to lines out would propably give me a lot of headaches. Bjarne To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20011016111536.VWHS23247.fepA.post.tele.dk>