From owner-freebsd-questions  Thu Jan  3  7:38:50 2002
Delivered-To: freebsd-questions@freebsd.org
Received: from web14808.mail.yahoo.com (web14808.mail.yahoo.com [216.136.224.224])
	by hub.freebsd.org (Postfix) with SMTP id D0FA337B405
	for <freebsd-questions@freebsd.org>; Thu,  3 Jan 2002 07:38:47 -0800 (PST)
Message-ID: <20020103153847.12460.qmail@web14808.mail.yahoo.com>
Received: from [207.139.167.27] by web14808.mail.yahoo.com via HTTP; Thu, 03 Jan 2002 07:38:47 PST
Date: Thu, 3 Jan 2002 07:38:47 -0800 (PST)
From: Chris Appleton <appleton_chris@yahoo.com>
Subject: ipfw.rules
To: freebsd-questions@freebsd.org
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-questions.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-questions>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-questions>
X-Loop: FreeBSD.ORG

I'm struggling getting a simple ruleset working in a 4.4release bridge.

If I run just
 allow ip from any to any  #things run well (of course).

But if I build:
 allow tcp from any to any established
 allow ip from a.b.c.d to any
 deny ip from any to any  #http requests slow dramatically

am I missing something, like some 0.0.0.0 udp trick to allow arp
packets (i've glaced but can't find the article anymore).  Is that
something I need to do.
What it looks like is something between allowing any TCP and allowing
any IP that I'm not doing.

Thanks advance,

__________________________________________________
Do You Yahoo!?
Send your FREE holiday greetings online!
http://greetings.yahoo.com

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message