Date: Thu, 13 Aug 1998 12:35:21 -0700 (PDT) From: Doug White <dwhite@resnet.uoregon.edu> To: Dan Langille <junkmale@xtra.co.nz> Cc: freebsd-questions@FreeBSD.ORG Subject: Re: ipfw rules Message-ID: <Pine.BSF.4.00.9808131234430.11633-100000@resnet.uoregon.edu> In-Reply-To: <199808120750.TAA00553@cyclops.xtra.co.nz>
next in thread | previous in thread | raw e-mail | index | archive | help
On Wed, 12 Aug 1998, Dan Langille wrote: > On 12 Aug 98, at 0:31, Doug White wrote: > > > > > On Tue, 11 Aug 1998, Dan Langille wrote: > > > > > I'm using ipfw and natd for my home subnet. The FreeBSD box acts as a > > > gateway to my ADSL connection. I'm using the simple firewall as > > > defined in rc.firewall. However, some of the default rules are > > > preventing some services from working. But I don't understand why. > > > > > > Below are the rules and a description of what they prevent when they > > > are enabled. If someone could explain why the rule stops what it > > > does, I would appreciate it. > > > > > > oif=ed0 > > > > > > # if either of the following two lines are enabled, it stops my > > > # Pegasus email client from accessing the POP server at my ISP > > > add deny all from 192.168.0.0:255.255.0.0 to any via ${oif} > > > > Stop any packets originating from 192.168.x.x from leaving this machine. > > What's the machine's IP? > > ed0 (outside world) is not within this range. ed1 (my subnet) is. Isn't > this rule trying to stop packets going out on ed0 (outside world)? Assuming ${oif} == 'ed0'... > > > add pass tcp from any to any setup > > > > Allows TCP connections to start but probably blocks the rest because of > > the above rule. > > Yeah. Strange. These are the default rules within rc.firewall. Not a clue. My ipfw adventures start next week. :) Doug White | University of Oregon Internet: dwhite@resnet.uoregon.edu | Residence Networking Assistant http://gladstone.uoregon.edu/~dwhite | Computer Science Major To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.00.9808131234430.11633-100000>