From owner-freebsd-questions Thu Jul 16 14:23:09 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id OAA17929 for freebsd-questions-outgoing; Thu, 16 Jul 1998 14:23:09 -0700 (PDT) (envelope-from owner-freebsd-questions@FreeBSD.ORG) Received: from resnet.uoregon.edu (resnet.uoregon.edu [128.223.144.32]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id OAA17921 for ; Thu, 16 Jul 1998 14:23:08 -0700 (PDT) (envelope-from dwhite@resnet.uoregon.edu) Received: from localhost (dwhite@localhost) by resnet.uoregon.edu (8.8.5/8.8.8) with SMTP id OAA05673; Thu, 16 Jul 1998 14:22:50 -0700 (PDT) (envelope-from dwhite@resnet.uoregon.edu) Date: Thu, 16 Jul 1998 14:22:50 -0700 (PDT) From: Doug White To: Peter Hald Jensen cc: freebsd-questions@FreeBSD.ORG Subject: Re: Packet filtering. In-Reply-To: <001201bdaf4d$3430d500$027af9c3@Unix.mira.dk> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG On Tue, 14 Jul 1998, Peter Hald Jensen wrote: > 195.249.122.1 = FreeBSD 2.2.6 > 195.249.122.2 = Win98 > 195.184.60.2 = DNS > > Why is it that when I set "ipfw add deny all from 195.249.122.2 to > 195.249.122.1" I'm still able to ppp to 195.249.122.1 from to the > computer I just denied?? If I ping 195.249.122.1 from 195.249.122.2 it > says "request timed out" as it should, but when I do anything that has > something to do with ppp the modem just dials as usual & everything > "works". Why is that? Isn't "deny all" suposed to filter out all > packets from 195.249.122.2 letting nothing through? Because ipfw can't keep you from running a program or configuring an interface. It can keep you from communicating with that host though. Doug White | University of Oregon Internet: dwhite@resnet.uoregon.edu | Residence Networking Assistant http://gladstone.uoregon.edu/~dwhite | Computer Science Major To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message