From owner-freebsd-security Thu Oct 29 04:35:55 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id EAA18421 for freebsd-security-outgoing; Thu, 29 Oct 1998 04:35:55 -0800 (PST) (envelope-from owner-freebsd-security@FreeBSD.ORG) Received: from ns.cityip.co.za (ns.cityip.co.za [196.25.223.140]) by hub.freebsd.org (8.8.8/8.8.8) with SMTP id EAA18416 for ; Thu, 29 Oct 1998 04:35:52 -0800 (PST) (envelope-from wjv@cityip.co.za) Received: from wjv by ns.cityip.co.za with local (Exim 1.82 #2) id 0zYrIp-0003xH-00; Thu, 29 Oct 1998 14:35:47 +0200 Message-ID: <19981029143547.A15193@cityip.co.za> Date: Thu, 29 Oct 1998 14:35:47 +0200 From: Johann Visagie To: security@FreeBSD.ORG Subject: Re: Connections succeed even though denied by IPFW References: <19981029122811.A14672@cityip.co.za> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Mailer: Mutt 0.91.1i In-Reply-To: <19981029122811.A14672@cityip.co.za>; from Johann Visagie on Thu, Oct 29, 1998 at 12:28:11PM +0200 X-PGP: ftp://ftp.cityip.co.za/users/wjv/pubkey.asc Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Following up to my own posting, with a very red face: On Thu, 29 Oct 1998 at 12:28 SAT, Johann Visagie wrote: > > I have a rather strange situation here, on a 2.2.5-REL box which currently > has an uptime of over 100 days (I don't know if that might affect it in any > way). [ snip ] Problem solved. It was all due to a gross misconfiguration of IPFW rules by yours truly. Worse, this situation has persisted for some months - time to do a thorough security audit on the box in question. :-( Again, sorry to have wasted everyone's time. -- V Johann Visagie | wjv@CityIP.co.za | Tel: +27 21 419-7878 | ICQ: 20645559 To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message