Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 30 Jan 1998 09:20:20 +0000
From:      Karl Pielorz <kpielorz@tdx.co.uk>
To:        Doug White <dwhite@resnet.uoregon.edu>
Cc:        Jason McKay <jasonm@webace.com.au>, questions@FreeBSD.ORG
Subject:   Re: ipfw help
Message-ID:  <34D19B54.EA8293AF@tdx.co.uk>
References:  <Pine.BSF.3.96.980129210122.1248W-100000@gdi.uoregon.edu>

next in thread | previous in thread | raw e-mail | index | archive | help
The problem with that is you can't use names in the ipfw command (at least I
don't think you can - and Yahoo may spread there site over a few different IP
addresses (after a quick NS lookup) it looks like you might be lucky, and get
away just with 204.71.200.74, e.g.

Something like:

ipfw allow tcp from any to 204.71.200.74
ipfw allow tcp from 204.71.200.74 to any established

Would do the trick, assuming Yahoo's only IP is 204.71.200.74.


Regards,

Karl


Doug White wrote:
> 
> On Wed, 28 Jan 1998, Jason McKay wrote:
> 
> > Hello,
> >
> > I am just tring to figure out ipfw .. and having a few troubles ... if
> > possible could someone please post the command line I would use if I wanted
> > to do the following:
> >
> > Restrict web access to all web sites except www.yahoo.com ...
> 
> deny all from any to any
> allow ip from any to www.yahoo.com
> 
> See ipfw(8).
> 
> ????  I don't do firewalls yet.
> 
> Doug White                              | University of Oregon
> Internet:  dwhite@resnet.uoregon.edu    | Residence Networking Assistant
> http://gladstone.uoregon.edu/~dwhite    | Computer Science Major



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?34D19B54.EA8293AF>