From owner-freebsd-questions@FreeBSD.ORG Wed Jan 25 12:48:17 2006 Return-Path: X-Original-To: freebsd-questions@freebsd.org Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id BC58016A41F for ; Wed, 25 Jan 2006 12:48:17 +0000 (GMT) (envelope-from fbsd_user@a1poweruser.com) Received: from mta10.adelphia.net (mta10.adelphia.net [68.168.78.202]) by mx1.FreeBSD.org (Postfix) with ESMTP id 00D1D43D48 for ; Wed, 25 Jan 2006 12:48:15 +0000 (GMT) (envelope-from fbsd_user@a1poweruser.com) Received: from barbish ([69.172.31.117]) by mta10.adelphia.net (InterMail vM.6.01.05.02 201-2131-123-102-20050715) with SMTP id <20060125124815.XNVZ8657.mta10.adelphia.net@barbish>; Wed, 25 Jan 2006 07:48:15 -0500 From: "fbsd_user" To: "Mark Frasa" , Date: Wed, 25 Jan 2006 07:48:10 -0500 Message-ID: MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook IMO, Build 9.0.6604 (9.0.2911.0) In-Reply-To: <43D73F10.70408@frasa.net> X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1409 Importance: Normal Cc: Subject: RE: IPFW / NFSD X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: fbsd_user@a1poweruser.com List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 25 Jan 2006 12:48:17 -0000 Post complete content of your rules file for review by people here on list. -----Original Message----- From: owner-freebsd-questions@freebsd.org [mailto:owner-freebsd-questions@freebsd.org]On Behalf Of Mark Frasa Sent: Wednesday, January 25, 2006 4:04 AM To: freebsd-questions@freebsd.org Subject: IPFW / NFSD Hello, I am currently running 1 HTTP server on FreeBSD 6.0 Offcourse, like anyone that likes security, i am running IPFW and set the kernel to block by default. Behind that HTTP server i am running 2 Linux boxes. The problem is that when i enable the firewall and openup ports from rpcinfo -p: program vers proto port service 100000 4 tcp 111 rpcbind 100000 3 tcp 111 rpcbind 100000 2 tcp 111 rpcbind 100000 4 udp 111 rpcbind 100000 3 udp 111 rpcbind 100000 2 udp 111 rpcbind 100000 4 local 111 rpcbind 100000 3 local 111 rpcbind 100000 2 local 111 rpcbind 100005 1 udp 668 mountd 100005 3 udp 668 mountd 100005 1 tcp 984 mountd 100005 3 tcp 984 mountd 100003 2 udp 2049 nfs 100003 3 udp 2049 nfs 100003 2 tcp 2049 nfs 100003 3 tcp 2049 nfs I opened up all these ports but i cant do an ls or write to nfs or whatever. Then i thought maybe it's trying something local so i added: $cmd add 00225 allow ip from 1.2.3.4/24 to any keep-state Even this does not work. Tcpdump shows me that when i have ipfw open, it only communicates with port 2049 and i don't see anything more. Can anybody help me out here? Additional info: { alltid@arcas } uname -a FreeBSD arcas 6.0-RELEASE-p1 FreeBSD 6.0-RELEASE-p1 #2: Wed Jan 4 15:45:38 UTC 2006 markfra@arcas:/usr/obj/usr/src/sys/ARCAS i386 Mark. _______________________________________________ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.org"