From owner-freebsd-security  Fri Jun 11 16: 5:44 1999
Delivered-To: freebsd-security@freebsd.org
Received: from rapidnet.com (rapidnet.com [205.164.216.1])
	by hub.freebsd.org (Postfix) with ESMTP id 74769154C6
	for <freebsd-security@FreeBSD.ORG>; Fri, 11 Jun 1999 16:05:41 -0700 (PDT)
	(envelope-from nick@rapidnet.com)
Received: from localhost (nick@localhost)
	by rapidnet.com (8.9.3/8.9.3) with ESMTP id RAA46957;
	Fri, 11 Jun 1999 17:03:44 -0600 (MDT)
Date: Fri, 11 Jun 1999 17:03:44 -0600 (MDT)
From: Nick Rogness <nick@rapidnet.com>
To: "Jason L. Schwab" <jschwab@royal.net>
Cc: Pete Fritchman <petef@netreach.net>, ghandi@mindless.com,
	freebsd-security@FreeBSD.ORG
Subject: Re: firewalls
In-Reply-To: <Pine.LNX.3.96.990611171436.3504B-100000@static-petef.netreach.net>
Message-ID: <Pine.BSF.4.05.9906111701370.44102-100000@rapidnet.com>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org

On Fri, 11 Jun 1999, Pete Fritchman wrote:

> You probably just want to deny all icmp to your dialup.
> 
> ipfw add deny icmp from any to any


	Some online games rely on icmp packets to monitor
	your speed to the server (eg. Quake2).  With some
	games this might be a problem.


> 
> --------------------
> [  Pete Fritchman  ]
> [ Systems Engineer ]
> [petef@netreach.net]
> --------------------
> 
> On Fri, 11 Jun 1999, Jason L. Schwab wrote:
> 
> > Date: Fri, 11 Jun 1999 14:21:27 -0700 (MST)
> > From: "Jason L. Schwab" <jschwab@royal.net>
> > To: ghandi@mindless.com
> > Cc: freebsd-security@FreeBSD.ORG
> > Subject: firewalls
> > 
> > Dear all of you,
> > 
> > 	What rules should i add to ipfw to make it to where no one can
> > Denial Of Service or D.o.S. me or any of those kinds of things? but i
> > wanna allow everything else thro. i'm on 56k dialup.. hope to be on
> > 256k once our phone company here gets it up and running... thanks
> > 
> > 
> > 
> > To Unsubscribe: send mail to majordomo@FreeBSD.org
> > with "unsubscribe freebsd-security" in the body of the message
> > 
> 
> 
> 
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-security" in the body of the message
> 

*******************************************************************
Nick Rogness		    	 "Never settle with words what
System Administrator	          can be accomplished with a 
RapidNet, INC   		  flame-thrower"  
nick@rapidnet.com		
*******************************************************************





To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message