Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 30 Jul 2002 14:31:33 +0200
From:      Mark Pearce <mark@netchat.co.za>
To:        freebsd-questions@FreeBSD.ORG
Subject:   ipfw weirdness
Message-ID:  <20020730143133.217d5d2d.mark@netchat.co.za>

next in thread | raw e-mail | index | archive | help
Hi all

I have the following situation, I have a client behind my box running exchange, and they are getting spammed to death, I want to disallow all incoming traffic to their box, but allow incoming traffic from their secondries only, the secondries are not getting spammed at this moment.

I am running a ipfw / natd combination 

My default ruleset is allow all
I run the command 

ipfw add allow 200 tcp from 196.x.x.x to 196.x.x.y 25 

and it effectivly blocks everything coming from anywhere even although I have just allowed it, if I remove the rule, it works fine again.

If I run the rule
ipfw add 200 deny tcp from not 196.x.x.x to 196.x.x.y 25 it works on the port, but blocks all other traffic which is not what I had in mind.

What am I overlooking here.

Help

Mark

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20020730143133.217d5d2d.mark>