From owner-freebsd-questions  Fri Jan 30 01:20:48 1998
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Received: (from majordom@localhost)
          by hub.freebsd.org (8.8.8/8.8.8) id BAA24244
          for questions-outgoing; Fri, 30 Jan 1998 01:20:48 -0800 (PST)
          (envelope-from owner-freebsd-questions@FreeBSD.ORG)
Received: from caladan.tdx.co.uk (caladan.tdx.co.uk [195.188.177.4])
          by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id BAA24184
          for <questions@FreeBSD.ORG>; Fri, 30 Jan 1998 01:20:43 -0800 (PST)
          (envelope-from kpielorz@tdx.co.uk)
Received: from tdx.co.uk (lorca-tx.tdx.co.uk [195.188.177.242])
	by caladan.tdx.co.uk (8.8.7/8.8.7) with ESMTP id JAA10687;
	Fri, 30 Jan 1998 09:20:19 GMT
	(envelope-from kpielorz@tdx.co.uk)
Message-ID: <34D19B54.EA8293AF@tdx.co.uk>
Date: Fri, 30 Jan 1998 09:20:20 +0000
From: Karl Pielorz <kpielorz@tdx.co.uk>
Organization: TDX
X-Mailer: Mozilla 4.04 [en] (WinNT; I)
MIME-Version: 1.0
To: Doug White <dwhite@resnet.uoregon.edu>
CC: Jason McKay <jasonm@webace.com.au>, questions@FreeBSD.ORG
Subject: Re: ipfw help
References: <Pine.BSF.3.96.980129210122.1248W-100000@gdi.uoregon.edu>
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.ORG
X-To-Unsubscribe: mail to majordomo@FreeBSD.org "unsubscribe questions"

The problem with that is you can't use names in the ipfw command (at least I
don't think you can - and Yahoo may spread there site over a few different IP
addresses (after a quick NS lookup) it looks like you might be lucky, and get
away just with 204.71.200.74, e.g.

Something like:

ipfw allow tcp from any to 204.71.200.74
ipfw allow tcp from 204.71.200.74 to any established

Would do the trick, assuming Yahoo's only IP is 204.71.200.74.


Regards,

Karl


Doug White wrote:
> 
> On Wed, 28 Jan 1998, Jason McKay wrote:
> 
> > Hello,
> >
> > I am just tring to figure out ipfw .. and having a few troubles ... if
> > possible could someone please post the command line I would use if I wanted
> > to do the following:
> >
> > Restrict web access to all web sites except www.yahoo.com ...
> 
> deny all from any to any
> allow ip from any to www.yahoo.com
> 
> See ipfw(8).
> 
> ????  I don't do firewalls yet.
> 
> Doug White                              | University of Oregon
> Internet:  dwhite@resnet.uoregon.edu    | Residence Networking Assistant
> http://gladstone.uoregon.edu/~dwhite    | Computer Science Major