From owner-freebsd-questions@FreeBSD.ORG Fri Feb 4 19:09:34 2005 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id D6B7D16A4CE for ; Fri, 4 Feb 2005 19:09:34 +0000 (GMT) Received: from male.aldigital.co.uk (male.thebunker.net [213.129.64.13]) by mx1.FreeBSD.org (Postfix) with ESMTP id 759E443D39 for ; Fri, 4 Feb 2005 19:09:34 +0000 (GMT) (envelope-from matthew@thebunker.net) Received: from gravitas.thebunker.net (gateway.ash.thebunker.net [213.129.64.4]) (using TLSv1 with cipher EDH-RSA-DES-CBC3-SHA (168/168 bits)) (No client certificate requested) by male.aldigital.co.uk (Postfix) with ESMTP id 19E2C97678; Fri, 4 Feb 2005 19:09:33 +0000 (GMT) Received: from gravitas.thebunker.net (localhost [127.0.0.1]) j14J9QOC017224; Fri, 4 Feb 2005 19:09:26 GMT (envelope-from matthew@gravitas.thebunker.net) Received: (from matthew@localhost) by gravitas.thebunker.net (8.13.1/8.13.1/Submit) id j14J9MnU017223; Fri, 4 Feb 2005 19:09:22 GMT (envelope-from matthew) Date: Fri, 4 Feb 2005 19:09:22 +0000 From: Matthew Seaman To: crzdgns1@starpower.net Message-ID: <20050204190922.GA17048@gravitas.thebunker.net> Mail-Followup-To: Matthew Seaman , crzdgns1@starpower.net, freebsd-questions@freebsd.org References: <58bcd033.c960e3a7.819d500@ms07.mrf.mail.rcn.net> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="IJpNTDwzlM2Ie8A6" Content-Disposition: inline In-Reply-To: <58bcd033.c960e3a7.819d500@ms07.mrf.mail.rcn.net> User-Agent: Mutt/1.5.6i cc: freebsd-questions@freebsd.org Subject: Re: Newbie Help: IP firewall configuration X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 04 Feb 2005 19:09:34 -0000 --IJpNTDwzlM2Ie8A6 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Fri, Feb 04, 2005 at 09:32:31AM -0500, crzdgns1@starpower.net wrote: > > # Allow out access to my ISP's DHCP server for cable or DSL > > networks. > > # This rule is not needed for 'user ppp' type connection to the > > # public Internet, so you can delete this whole group. > > # Use the following rule and check log for IP address. > > # Then put IP address in commented out rule & delete first rule > > pass out log quick on dc0 proto udp from any to any port =3D 67 keep=20 > > state > > #pass out quick on dc0 proto udp from any to z.z.z.z port =3D 67 keep= =20 > > state >=20 > Please help. How do I find the IP address referenced in the fourth #? = =20 That will be the IP address of your ISP's DHCP server. They may well have givenyou some documentation, or put that information on a website, or failing that, you could just call their help line and ask. > Where is the log file that is referenced in the fourth #? If I need to u= se=20 > find, whereis, locate, or some other command line search tool to find=20 > the log file, please write out the details for me, because I am really=20 > struggling with command line syntax at this point. I have clearly=20 > suffered from too much exposure to the point and click world. The log file you need is /var/log/auth.log -- that's where anything security related generally gets logged. Almost everything in the base systeem and many of the ports which write data into logfiles will keep those logfiles under /var/log. Makes them much easier to find... Cheers, Matthew --=20 Dr Matthew J Seaman MA, D.Phil. 8 Dane Court Manor School Rd PGP: http://www.infracaninophile.co.uk/pgpkey Tilmanstone Tel: +44 1304 617253 Kent, CT14 0JL UK --IJpNTDwzlM2Ie8A6 Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.0 (FreeBSD) iQCVAwUBQgPIYpr7OpndfbmCAQK7nAQAiqOiJlxjXZQmwM2skWxRAFaJiaSkoq0U U8+V7rcvjVeP+PuAlU6vZaHbPnqpmwVBiB6IsOCH2tXHtZqnQLaypSZ52maZmb2B bUUELY99lc8KNOIgoF7pNP2W0sylLZ1ISVQUKBNiBZ8zRfNzzHecqN+JxLHrYnsY yfeFW83UTJI= =YoWl -----END PGP SIGNATURE----- --IJpNTDwzlM2Ie8A6--