From owner-freebsd-questions Tue Oct 16 7:35:13 2001 Delivered-To: freebsd-questions@freebsd.org Received: from ashram.rhavenn.net (ashram.rhavenn.net [209.150.195.50]) by hub.freebsd.org (Postfix) with ESMTP id 01A8637B407 for ; Tue, 16 Oct 2001 07:35:10 -0700 (PDT) Received: from there (gandalf.rhavenn.net [209.150.195.51]) by ashram.rhavenn.net (8.11.3/8.11.3) with SMTP id f9HEuoi58384; Wed, 17 Oct 2001 09:56:51 -0500 (CDT) Message-Id: <200110171456.f9HEuoi58384@ashram.rhavenn.net> Content-Type: text/plain; charset="iso-8859-1" From: Henrik Hudson Reply-To: lists@rhavenn.net To: Bjarne Wichmann Petersen Subject: Re: Firewall not logging Date: Tue, 16 Oct 2001 09:48:29 -0500 X-Mailer: KMail [version 1.3] References: <20011016085031.ZUFR22989.fepB.post.tele.dk@there> <20011016020733.F293@blossom.cjclark.org> <20011016111536.VWHS23247.fepA.post.tele.dk@there> In-Reply-To: <20011016111536.VWHS23247.fepA.post.tele.dk@there> Cc: freebsd-questions@freebsd.org MIME-Version: 1.0 Content-Transfer-Encoding: 8bit Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG They should be: $fwcmd add allow ip from #YOURIPADDRESSHERE# to any via lo0 $fwcmd add allow ip from #YOURIPADDRESSHERE# to any via xl0 On Tuesday 16 October 2001 06:18, you wrote: > On Tuesday 16 October 2001 11:07, Crist J. Clark wrote: > > > # Allow all data from my network card and localhost. Make sure you > > > # change your network card (mine was fxp0) before you reboot. :) > > > $fwcmd add allow ip from any to any via lo0 > > > $fwcmd add allow ip from any to any via xl0 > > > > All traffic is being passed by these two rules. Neither of these rules > > log. None of the log rules that are below this are ever reached. > > Hmm, I've got this from > http://www.freebsd.org/doc/en_US.ISO8859-1/articles/dialup-firewall/rules.h >tml with a few modifications. > > I'm not very well versed into ipfw, but I think the idea here is that > trafic behind the wall should go unhindered. Should I substitue "via" with > "out xmit" instead? Just commenting those to lines out would propably give > me a lot of headaches. > > Bjarne > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-questions" in the body of the message -- Henrik Hudson lists@rhavenn.net To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message