From owner-freebsd-questions@FreeBSD.ORG Fri Nov 28 08:16:43 2008 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id E2985106567C for ; Fri, 28 Nov 2008 08:16:43 +0000 (UTC) (envelope-from bernt@bah.homeip.net) Received: from feeder.usenet4all.se (1-1-1-38a.far.sth.bostream.se [82.182.32.53]) by mx1.freebsd.org (Postfix) with ESMTP id 66F428FC16 for ; Fri, 28 Nov 2008 08:16:43 +0000 (UTC) (envelope-from bernt@bah.homeip.net) Received: from [80.217.86.51] (c80-217-86-51.bredband.comhem.se [80.217.86.51]) by feeder.usenet4all.se (8.13.1/8.13.1) with ESMTP id mAS8GdwE056789; Fri, 28 Nov 2008 09:16:39 +0100 (CET) (envelope-from bernt@bah.homeip.net) Message-ID: <492FA8E7.6030801@bah.homeip.net> Date: Fri, 28 Nov 2008 09:16:39 +0100 From: Bernt Hansson User-Agent: slrn/1.0.5 (FreeBSD) MIME-Version: 1.0 To: Fbsd1 References: <492E60A8.6080105@a1poweruser.com> <492F82D1.4020000@bah.homeip.net> <492F8E9B.5040805@a1poweruser.com> <492F95EB.8080308@bah.homeip.net> <492F9B68.8080407@a1poweruser.com> In-Reply-To: <492F9B68.8080407@a1poweruser.com> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Cc: freebsd-questions@freebsd.org Subject: Re: pf or ipf rules to allow p2p Limewire through X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 28 Nov 2008 08:16:44 -0000 Fbsd1 said the following on 2008-11-28 08:19: > I checked the ipfilter online handbook and can not find anything about > rules for igmp packets, p2p or limewire. I know what a rdr statement > does but can not see how it can be applied to a p2p application which > does NOT use dedicated port numbers. The only way i can run limewire is > to disable my firewall and that does not make me happy. > > > I think the conclusion is that all 3 of the freebsd firewalls are unable > to monitor packet exchange of p2p applications. These firewalls were > designed before p2p applications were developed and their (p2p) inherent > design is to defeat standard firewall designs. http://en.wikipedia.org/wiki/Internet_Group_Management_Protocol