Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 11 Dec 2001 18:58:59 -0800 (PST)
From:      "f.johan.beisser" <jan@caustic.org>
To:        Lorin Lund <wbs@infowest.com>
Cc:        FreeBSD Questions <freebsd-questions@FreeBSD.ORG>
Subject:   Re: ping says 'Permission Denied'
Message-ID:  <20011211185508.I16958-100000@localhost>
In-Reply-To: <20011212024938.A033A20F67@ns1.infowest.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On Tue, 11 Dec 2001, Lorin Lund wrote:

> I'm using 4.4 RELEASE.  I want to use natd (with a DSL connection)
> so I built a new kernel with
> option  IPFIREWALL
> option  IPDIVERT

okay. you added a network firewall.

> When I reboot I can't ping that machine from outside.  When I try
> to ping other addresses from the box with the new kernel ping
> gives an error message about 'Permission denied'.
>
> Does anyone have experience with this?

you don't allow outgoing/incoming icmp. please read up on ipfw(8) and take
a look at the LINT kernel file for IPFIREWALL_DEFAULT_TO_ACCEPT for an
"open" firewall.

http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/firewalls.html

has a decent introduction to firewalling on freebsd.

-------/ f. johan beisser /--------------------------------------+
  http://caustic.org/~jan                      jan@caustic.org
    "John Ashcroft is really just the reanimated corpse
         of J. Edgar Hoover." -- Tim Triche


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20011211185508.I16958-100000>