Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 9 Nov 1997 19:44:20 +1100 (EST)
From:      "Daniel O'Callaghan" <danny@panda.hilink.com.au>
To:        Richard Furda <rfurda@wgss.net>
Cc:        "Jordan K. Hubbard" <jkh@time.cdrom.com>, bugs@FreeBSD.ORG
Subject:   Re: Firewall
Message-ID:  <Pine.BSF.3.91.971109193925.253M-100000@panda.hilink.com.au>
In-Reply-To: <3.0.3.32.19971108211718.00689454@wgss.net>

index | next in thread | previous in thread | raw e-mail


On Sat, 8 Nov 1997, Richard Furda wrote:

> I am trying to get my firewall to work. I think that /etc/rc.firewall is
> broken.
> 
> First, the versions:
> 
> FreeBSD gator.wgss.net 2.2.5-STABLE FreeBSD 2.2.5-STABLE #0: Sat Nov  8
> 17:44:52 PST 1997     riso@gator.wgss.net:/usr/src/sys/compile/custom  i386
> 
> $Id: rc.firewall,v 1.6.2.5 1997/10/21 00:20:35 jkh Exp $
> $Id: rc.conf,v 1.1.2.29 1997/10/31 02:00:42 jdp Exp $
> 
> When firewall is specified to 'open' a very important rule is not passed out,
> ipfw add 1000 pass all from any to any

You should have in rc.conf
firewall_enable="YES"
firewall_type="open"

At rc.firewall line 71 $firewall_type is tested for values "open" and "OPEN"
and adds the line 65000 pass all from any to any.

How does this fit with what you are seeing?

Danny


home | help

Want to link to this message? Use this
URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.3.91.971109193925.253M-100000>