From owner-freebsd-questions@FreeBSD.ORG Wed Apr 6 01:18:36 2005 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id F27E616A4CE for ; Wed, 6 Apr 2005 01:18:35 +0000 (GMT) Received: from engraver.valleygate.net (12-240-1-161.client.mchsi.com [12.240.1.161]) by mx1.FreeBSD.org (Postfix) with ESMTP id 16C5543D94 for ; Wed, 6 Apr 2005 01:18:27 +0000 (GMT) (envelope-from wizlayer@gmail.com) Received: from wizard.valleygate.net (wizard.valleygate.net [10.51.10.3]) j361I7ma002420 for ; Tue, 5 Apr 2005 21:18:07 -0400 (EDT) (envelope-from wizlayer@gmail.com) From: wizlayer To: freebsd-questions@freebsd.org Date: Tue, 5 Apr 2005 21:18:05 -0400 User-Agent: KMail/1.7.2 References: <001501c53a42$a3d58860$030a000a@CTU> In-Reply-To: <001501c53a42$a3d58860$030a000a@CTU> MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit Content-Disposition: inline Message-Id: <200504052118.06366.wizlayer@gmail.com> Subject: Re: ipf.rules X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list Reply-To: wizlayer@gmail.com List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 06 Apr 2005 01:18:36 -0000 On Tuesday 05 April 2005 08:50 pm, Francis Whittington wrote: > Hi all, > In ipf.rules at the section below it says to run 1st rule, > then look for ip address, put it in commented out rule and > delete 1st rule . How do I know what ip address is my isp's > DHCP server address? > > > # Allow out access to my ISP's DHCP server for cable or DSL > networks. # This rule is not needed for 'user ppp' type > connection to the # public Internet, so you can delete this > whole group. # Use the following rule and check log for IP > address. # Then put IP address in commented out rule & delete > first rule pass out log quick on dc0 proto udp from any to any > port = 67 keep state #pass out quick on dc0 proto udp from any > to z.z.z.z port = 67 keep state It sais, "Use the following rule and _check log_ for IP address..." Check your pf log (whatever it's setup to be). If your ipf.rules isn't set up to log any events, then set it up and check it again... Just the same, you could also whois your ISP and get their DNS, or call tech support and they'll tell you. HTH, WizLayer