From owner-freebsd-questions  Tue Oct  9 15:32:35 2001
Delivered-To: freebsd-questions@freebsd.org
Received: from itouch.co.nz (itouch.co.nz [203.99.66.188])
	by hub.freebsd.org (Postfix) with ESMTP id 33C4937B408
	for <freebsd-questions@freebsd.org>; Tue,  9 Oct 2001 15:32:32 -0700 (PDT)
Received: from jonc.itouch ([192.168.2.21])
	by itouch.co.nz with esmtp (Exim 3.33 #1)
	id 15r5QN-00058F-00; Wed, 10 Oct 2001 11:32:31 +1300
Received: (from jonc@localhost)
	by jonc.itouch (8.11.6/8.11.6) id f99MWT309638;
	Wed, 10 Oct 2001 11:32:29 +1300 (NZDT)
	(envelope-from jonc)
Date: Wed, 10 Oct 2001 11:32:29 +1300
From: Jonathan Chen <jonathan.chen@itouch.co.nz>
To: Scott Corey <scott@bsdprophet.org>, jacco@lionsoft.xs4all.nl
Cc: freebsd-questions@freebsd.org
Subject: Re: [Fwd: Kernel compiling]
Message-ID: <20011010113229.B9529@jonc.itouch>
References: <3BC37814.7060100@bsdprophet.org>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.2.5i
In-Reply-To: <3BC37814.7060100@bsdprophet.org>; from scott@bsdprophet.org on Tue, Oct 09, 2001 at 05:20:04PM -0500
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-questions.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-questions>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-questions>
X-Loop: FreeBSD.ORG

On Tue, Oct 09, 2001 at 05:20:04PM -0500, Scott Corey wrote:
> 
> 
> -------- Original Message --------
> Subject: Kernel compiling
> Date: Tue, 9 Oct 2001 23:34:59 +0200
> From: "Jacco" <jacco@lionsoft.xs4all.nl>
> Reply-To: <jacco@lionsoft.xs4all.nl>
> To: "FreeBSD Newbies" <newbies@FreeBSD.ORG>
> 
> 
> 
> Hi all,
> 
> Maybe it's a stupid question but, when I add the options IPFIREWALL and
> IPDIVERT to the kernelconfig an recompile it. Is it normal that I can not
> telnet or ping the machine anymore ? Why ?

'Cos the default firewall rule is to deny packets from anywhere to
anywhere. I suggest you put the following lines in your /etc/rc.conf
while you work out what sort of rules to implement:

    firewall_enable="YES"   # Set to YES to enable firewall functionality
    firewall_type="open"    # Firewall type (see /etc/rc.firewall)

-- 
Jonathan Chen <jonathan.chen@itouch.co.nz>
----------------------------------------------------------------------
                                                          Jesus saves.
                                                       Allah forgives.
                             Cthulu thinks you'd make a nice sandwich.

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message