From owner-freebsd-current@freebsd.org Mon Aug 24 13:08:41 2015 Return-Path: Delivered-To: freebsd-current@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 8964D9C0E43 for ; Mon, 24 Aug 2015 13:08:41 +0000 (UTC) (envelope-from admin@gyrec.cz) Received: from mail-wi0-f175.google.com (mail-wi0-f175.google.com [209.85.212.175]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 24E231ABC for ; Mon, 24 Aug 2015 13:08:40 +0000 (UTC) (envelope-from admin@gyrec.cz) Received: by wicja10 with SMTP id ja10so71820964wic.1 for ; Mon, 24 Aug 2015 06:08:33 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:message-id:date:from:user-agent:mime-version:to :subject:content-type:content-transfer-encoding; bh=AdELEnsVUqTnP31OvqIgUm/omWFy3mCi7qjXUtf2ETI=; b=lRZrLozE889GeoWXbQWzqxwwO+fASYcCnD1DGoWRv2D+r48NJ6R3osR/xn/K+9cVQt l94mjx9wYb09/TtajjMe057CcFba1JV2wT/xemmGJqBRc4blenqULw9s9EsrDJ5kZu7w hStOC7gDBmVJCTncJuCB23zD0OhCPyXthSam6l8nk4GdErnKOe2FSpZ3qv1oI2+K1/Mf 6fxc8+LvllRKoCg5StHhDDxPTooGWNCzmmoqqJNu1slCjEs51FSd+4yWtJ+YkGmX+L7o kGiFv05S0xuzwqiJAYQtPF8Hzs+vsJZd2fcXbsW6lCUtNPFLPFlW5v3q9HCuiOA7Y44i QwIQ== X-Gm-Message-State: ALoCoQn0m/ohnix8PsPfxbBjJfgBwNxogOZm72OYhxJ1OencDu1wuCw/ksBxgtBBVsFlpBbxbiTn X-Received: by 10.180.37.164 with SMTP id z4mr29655929wij.28.1440421713066; Mon, 24 Aug 2015 06:08:33 -0700 (PDT) Received: from [192.168.1.178] (gate.gyrec.cz. [86.49.91.98]) by smtp.gmail.com with ESMTPSA id fa8sm16153594wib.14.2015.08.24.06.08.31 for (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Mon, 24 Aug 2015 06:08:31 -0700 (PDT) Message-ID: <55DB16B7.2000602@gyrec.cz> Date: Mon, 24 Aug 2015 15:05:59 +0200 From: =?ISO-8859-2?Q?Petr_Chochol=E1=E8?= User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:31.0) Gecko/20100101 Thunderbird/31.7.0 MIME-Version: 1.0 To: freebsd-current@freebsd.org Subject: ipfw rules for connect port 993 Content-Type: text/plain; charset=iso-8859-2; format=flowed Content-Transfer-Encoding: 8bit X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 24 Aug 2015 13:08:41 -0000 Hello, I would like to ask you for advice. I can not connect to imap.gmail.com on port 993 from my local network. My LAN is behind freeBSD server with IPFW. Server has two network cards rl0=Internet and re0=LAN(10.0.0.0/16). Tcpdump on re0 shows three SYN packets without answers. What rules should i create? I tried someting like this, without success: #ipfw add 01500 allow ip from 10.0.0.0/16 to any in via re0 Thank you very much for any advice and your patience Petr Chocholáč Brno, Czech Republic