From owner-freebsd-ipfw Mon Jul 22 12:33:36 2002 Delivered-To: freebsd-ipfw@freebsd.org Received: from mx1.FreeBSD.org (mx1.FreeBSD.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 5067F37B400; Mon, 22 Jul 2002 12:33:33 -0700 (PDT) Received: from notus.primus.ca (mail.tor.primus.ca [216.254.136.21]) by mx1.FreeBSD.org (Postfix) with ESMTP id A2D2243E6E; Mon, 22 Jul 2002 12:33:32 -0700 (PDT) (envelope-from drwitura@primus.ca) Received: from firewall.primus.ca ([216.254.141.68] helo=oemcomputer) by notus.primus.ca with smtp (Exim 3.33 #16) id 17Wivz-0004i7-0A; Mon, 22 Jul 2002 15:33:31 -0400 Message-ID: <001901c231b4$ae10b500$b0120a0a@primustel.ca> From: "Didier Rwitura" To: "Crist J. Clark" , Cc: References: <200207181921.1340411.6@btsoftware.com> <005f01c22e83$e19188c0$b0120a0a@primustel.ca> <20020719085648.GI41699@cicely5.cicely.de> <20020722191319.GB51688@blossom.cjclark.org> Subject: Re: disconection Date: Mon, 22 Jul 2002 15:19:17 -0400 MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2600.0000 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000 Sender: owner-freebsd-ipfw@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG when I added the add 299 check-states i locked myself out, I removed it ==================================== Didier ----- Original Message ----- From: "Crist J. Clark" To: Cc: "Didier Rwitura" ; Sent: Monday, July 22, 2002 3:13 PM Subject: Re: disconection > On Fri, Jul 19, 2002 at 10:56:49AM +0200, Bernd Walter wrote: > > On Thu, Jul 18, 2002 at 01:52:26PM -0400, Didier Rwitura wrote: > > > Thanx martin and Thomas > > > > > > - the auto-off is off completely .. I guess the reason is mostly the > > > firewall > > > > > > - to answer Thomas > > > > > > yeap i do > > > here are my ipfw rules : > > > > > > #allow ssh > > > add 00300 allow tcp from 216.254.136.110 to any ssh in setup keep-state > > > > > > add 00301 allow tcp from any to any out setup keep-state > > > > > > add 00302 allow tcp from any ssh to any out setup keep-state > > > add 00304 allow tcp from any to any ssh in > > > add 00305 allow tcp from any to any out setup keep-state > > > > add 299 check-states > > It's 'check-state,' and adding it would be completely redundant. > -- > Crist J. Clark | cjclark@alum.mit.edu > | cjclark@jhu.edu > http://people.freebsd.org/~cjc/ | cjc@freebsd.org To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-ipfw" in the body of the message