From owner-freebsd-questions@FreeBSD.ORG  Wed May 21 06:04:56 2003
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 01CF237B408
	for <freebsd-questions@freebsd.org>;
	Wed, 21 May 2003 06:04:56 -0700 (PDT)
Received: from pa-plum1b-166.pit.adelphia.net (pa-plum1a-215.pit.adelphia.net
	[24.53.170.215])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 46CC043F75
	for <freebsd-questions@freebsd.org>;
	Wed, 21 May 2003 06:04:55 -0700 (PDT)
	(envelope-from wmoran@potentialtech.com)
Received: from potentialtech.com (working [172.16.0.95])
	h4LD4s0n017818;	Wed, 21 May 2003 09:04:54 -0400 (EDT)
	(envelope-from wmoran@potentialtech.com)
Message-ID: <3ECB7976.3070108@potentialtech.com>
Date: Wed, 21 May 2003 09:04:54 -0400
From: Bill Moran <wmoran@potentialtech.com>
User-Agent: Mozilla/5.0 (X11; U; FreeBSD i386; en-US; rv:1.3) Gecko/20030429
X-Accept-Language: en-us, en
MIME-Version: 1.0
References: <EGEDIDPPMCIONDEPOLNFOEDMCLAA.andras@kende.com>
	<1053521736.363.39.camel@asa.gascom.net.ru>
In-Reply-To: <1053521736.363.39.camel@asa.gascom.net.ru>
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit
cc: Andras Kende <andras@kende.com>
cc: freebsd-questions@freebsd.org
Subject: Re: ipfw rules for low-end server??
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 21 May 2003 13:04:56 -0000
X-List-Received-Date: Wed, 21 May 2003 13:04:56 -0000

> On Wed, 2003-05-21 at 04:10, Andras Kende wrote:
>>Also should set to kernel with: option IPFIREWALL_VERBOSE for debugging
>>purposes if needed
>>but disable logging firewall_logging=NO at rc.conf ?
>>
>>I want to allow everything to go out, only 22tcp,80tcp 53udp and 25tcp
>>(port_forwading) to in...

See /etc/rc.firewall for an example that does just about everything you
require here.  You'll have to add a rule for port 22, but you should be
able to discern what to do from that file.

Post here again if not.

-- 
Bill Moran
Potential Technologies
http://www.potentialtech.com