From owner-freebsd-questions  Tue Oct 16  4:15:42 2001
Delivered-To: freebsd-questions@freebsd.org
Received: from fepA.post.tele.dk (fepA.post.tele.dk [195.41.46.143])
	by hub.freebsd.org (Postfix) with ESMTP id 04EAF37B413
	for <freebsd-questions@FreeBSD.ORG>; Tue, 16 Oct 2001 04:15:38 -0700 (PDT)
Received: from there ([62.243.124.243]) by fepA.post.tele.dk
          (InterMail vM.4.01.03.23 201-229-121-123-20010418) with SMTP
          id <20011016111536.VWHS23247.fepA.post.tele.dk@there>;
          Tue, 16 Oct 2001 13:15:36 +0200
Content-Type: text/plain;
  charset="iso-8859-1"
From: Bjarne Wichmann Petersen <mekanix@privat.dk>
To: cjclark@alum.mit.edu, "Crist J. Clark" <cristjc@earthlink.net>
Subject: Re: Firewall not logging
Date: Tue, 16 Oct 2001 13:18:19 +0200
X-Mailer: KMail [version 1.3]
Cc: freebsd-questions@FreeBSD.ORG
References: <20011016085031.ZUFR22989.fepB.post.tele.dk@there> <20011016020733.F293@blossom.cjclark.org>
In-Reply-To: <20011016020733.F293@blossom.cjclark.org>
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit
Message-Id: <20011016111536.VWHS23247.fepA.post.tele.dk@there>
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-questions.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-questions>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-questions>
X-Loop: FreeBSD.ORG

On Tuesday 16 October 2001 11:07, Crist J. Clark wrote:

> > # Allow all data from my network card and localhost.  Make sure you
> > # change your network card (mine was fxp0) before you reboot.  :)
> > $fwcmd add allow ip from any to any via lo0
> > $fwcmd add allow ip from any to any via xl0
>
> All traffic is being passed by these two rules. Neither of these rules
> log. None of the log rules that are below this are ever reached.

Hmm, I've got this from 
http://www.freebsd.org/doc/en_US.ISO8859-1/articles/dialup-firewall/rules.html 
with a few modifications.

I'm not very well versed into ipfw, but I think the idea here is that trafic 
behind the wall should go unhindered. Should I substitue "via" with "out 
xmit" instead? Just commenting those to lines out would propably give me a 
lot of headaches.

Bjarne

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message