From owner-freebsd-bugs Sat Jan 12 1:40:11 2002 Delivered-To: freebsd-bugs@hub.freebsd.org Received: from freefall.freebsd.org (freefall.FreeBSD.org [216.136.204.21]) by hub.freebsd.org (Postfix) with ESMTP id CCA1737B416 for ; Sat, 12 Jan 2002 01:40:01 -0800 (PST) Received: (from gnats@localhost) by freefall.freebsd.org (8.11.6/8.11.6) id g0C9e1m76874; Sat, 12 Jan 2002 01:40:01 -0800 (PST) (envelope-from gnats) Date: Sat, 12 Jan 2002 01:40:01 -0800 (PST) Message-Id: <200201120940.g0C9e1m76874@freefall.freebsd.org> To: freebsd-bugs@FreeBSD.org Cc: From: "Crist J . Clark" Subject: Re: kern/33804: ipfw bug/problem Reply-To: "Crist J . Clark" Sender: owner-freebsd-bugs@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org The following reply was made to PR kern/33804; it has been noted by GNATS. From: "Crist J . Clark" To: Gary Cc: freebsd-gnats-submit@FreeBSD.ORG Subject: Re: kern/33804: ipfw bug/problem Date: Sat, 12 Jan 2002 01:34:17 -0800 On Fri, Jan 11, 2002 at 08:14:28PM -0800, Gary wrote: [snip] > On FreeBSD 4.3-STABLE, I could perform the following ipfw rules without problem. > > 208.141.46.11 is the actual interface, not a virutal IP. 208.141.46.249 is a aliased IP. The actual problem is, in fact, identd not working. When I set this type of firewall ruleset up on the older versions, identd was running out of inetd.conf, as user root. I could be able to force users not to abuse my hosts, and still permit identd to work for me. As of 4.4-RELEASE/4.5-RC, this same setup causes identd to stop working. I don't know what has changed since then, I was browsing the CVS archive, and I ca n't seem to find a problem. > > > > $fwcmd add permit ip from 208.141.46.249 to any gid ancient > $fwcmd add permit ip from 208.141.46.11 to any gid ancient > $fwcmd add permit ip from any to any uid nobody > $fwcmd add permit ip from any to any uid root > $fwcmd add deny log ip from 208.141.46.249 to any Why do you think the problem is firewall related? What auth packets are being logged by that last entry? -- "It's always funny until someone gets hurt. Then it's hilarious." Crist J. Clark | cjclark@alum.mit.edu | cjclark@jhu.edu http://people.freebsd.org/~cjc/ | cjc@freebsd.org To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-bugs" in the body of the message