From owner-freebsd-hackers Mon Sep 16 12:24:24 1996 Return-Path: owner-hackers Received: (from root@localhost) by freefall.freebsd.org (8.7.5/8.7.3) id MAA00567 for hackers-outgoing; Mon, 16 Sep 1996 12:24:24 -0700 (PDT) Received: from mexico.brainstorm.eu.org (root@mexico.brainstorm.eu.org [193.56.58.253]) by freefall.freebsd.org (8.7.5/8.7.3) with ESMTP id MAA00561 for ; Mon, 16 Sep 1996 12:24:21 -0700 (PDT) Received: from brasil.brainstorm.eu.org (brasil.brainstorm.eu.org [193.56.58.33]) by mexico.brainstorm.eu.org (8.7.5/8.7.3) with ESMTP id VAA03820 for ; Mon, 16 Sep 1996 21:24:11 +0200 Received: (from uucp@localhost) by brasil.brainstorm.eu.org (8.6.12/8.6.12) with UUCP id VAA12707 for hackers@FreeBSD.org; Mon, 16 Sep 1996 21:23:49 +0200 Received: (from roberto@localhost) by keltia.freenix.fr (8.8.Beta.1/keltia-uucp-2.9) id UAA03226; Mon, 16 Sep 1996 20:56:31 +0200 (MET DST) Message-Id: <199609161856.UAA03226@keltia.freenix.fr> Date: Mon, 16 Sep 1996 20:56:31 +0200 From: roberto@keltia.freenix.fr (Ollivier Robert) To: hackers@FreeBSD.org Subject: Re: Could use a favor In-Reply-To: ; from Narvi on Sep 16, 1996 19:03:00 +0300 References: X-Mailer: Mutt 0.43g Mime-Version: 1.0 X-Operating-System: FreeBSD 2.2-CURRENT ctm#2443 Sender: owner-hackers@FreeBSD.org X-Loop: FreeBSD.org Precedence: bulk According to Narvi: > The only conclusion I have come at is that it is to allow only things > that you especially allow to happen... The bad thing is that there is no > switch to switch the firewall on/off. You compile a new kernel with the > option for firewall and suddenly it accepts nothing over the network. Sure there is: By default all is off. To open (dangerous!!!) ipfw add 65000 pass all from any to any To close it again: ipfw delete 65000 -- Ollivier ROBERT -=- The daemon is FREE! -=- roberto@keltia.freenix.fr FreeBSD keltia.freenix.fr 2.2-CURRENT #21: Sun Sep 8 14:35:00 MET DST 1996