Date: Wed, 1 Oct 2003 19:25:28 +0100 From: Vince Hoffman <Vince.Hoffman@uk.circle.com> To: "'Gary'" <gv-list-freebsdquestions@mygirlfriday.info>, FreeBSD <questions@freebsd.org> Subject: RE: Firewall problem Message-ID: <3500515B75D9D311948800508BA37955014BE0BC@EX-LONDON>
next in thread | raw e-mail | index | archive | help
you have "allow ip from any to any" before your deny rules, unless my memory is seriously faulty (always possible) a packet will match that rule and never get to your deny rules. > -----Original Message----- > From: Gary [mailto:gv-list-freebsdquestions@mygirlfriday.info] > Sent: 01 October 2003 19:18 > To: FreeBSD > Subject: Firewall problem > > > I have set my firewall to > > firewall_type="open" > firewall_enable="YES" > > and when I want to drop a specific IP, I enter it manually, > it accepts it, > but it does not drop the packets.. > > I am getting a lot of virus activity on my SMTP port 25. So I > wanted to > drop a few IP ranges/addresses.. > > 00100 62054 5483792 allow ip from any to any via lo0 > 00200 0 0 deny ip from any to 127.0.0.0/8 > 00300 0 0 deny ip from 127.0.0.0/8 to any > 65000 873327 293931424 allow ip from any to any > 65100 0 0 deny tcp from 24.92.226.153 to any > 65110 0 0 deny ip from 213.191.102.86 to any > 65535 0 0 deny ip from any to any > > Yet, checking later in my SMTP logs, I am still getting pounded by the > listed addresses. Can anyone explain why this isn't working? > > Thanks, > > -- > Gary > _______________________________________________ > freebsd-questions@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to > "freebsd-questions-unsubscribe@freebsd.org" >
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?3500515B75D9D311948800508BA37955014BE0BC>