Date: Sun, 15 Apr 2001 17:50:45 -0500 (CDT) From: Nick Rogness <nick@rogness.net> To: The Hermit Hacker <scrappy@hub.org> Cc: freebsd-questions@FreeBSD.ORG Subject: Re: [IPFW] writing rules ... Message-ID: <Pine.BSF.4.21.0104151749420.61877-100000@cody.jharris.com> In-Reply-To: <Pine.BSF.4.33.0104151608330.72136-100000@mobile.hub.org>
next in thread | previous in thread | raw e-mail | index | archive | help
On Sun, 15 Apr 2001, The Hermit Hacker wrote: > > Can someone confirm for me whether I'm reading something like the below > correctly? > > Basically, ruleset 0107[01] will only get triggered for port != > (20,21,873,80), as, if its something on port 20, then it will stop > processing at rule 0101[01]? > > 01010 1302 127709 pipe 1 tcp from ###.###.##.## 20,21 to any > 01011 1298 67573 pipe 1 tcp from any to ###.###.##.## 20,21 > > 01040 588 874583 pipe 1 tcp from ###.###.##.## 873 to any > 01041 531 21248 pipe 1 tcp from any to ###.###.##.## 873 > > 01050 7220 8202922 pipe 2 tcp from ###.###.##.## 80 to any > 01051 5576 471509 pipe 2 tcp from any to ###.###.##.## 80 > > 01070 906 1021266 pipe 2 tcp from ###.###.##.## to any > 01071 786 40827 pipe 2 tcp from any to ###.###.##.## > Your assumptions are correct. Nick Rogness <nick@rogness.net> - Keep on Routing in a Free World... "FreeBSD: The Power to Serve!" To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.21.0104151749420.61877-100000>