From owner-freebsd-net  Tue Oct 24 23:34:43 2000
Delivered-To: freebsd-net@freebsd.org
Received: from pizza.monkeybrains.net (pizza.monkeybrains.net [209.21.40.4])
	by hub.freebsd.org (Postfix) with ESMTP id 90FEF37B479
	for <freebsd-net@FreeBSD.ORG>; Tue, 24 Oct 2000 23:34:41 -0700 (PDT)
Received: from localhost (rudy@localhost)
	by pizza.monkeybrains.net (8.11.1/8.11.1) with ESMTP id e9P6XSn73655;
	Tue, 24 Oct 2000 23:33:28 -0700 (PDT)
	(envelope-from rudy@monkeybrains.net)
Date: Tue, 24 Oct 2000 23:33:28 -0700 (PDT)
From: Rudy <rudy@monkeybrains.net>
To: kouryuu <kouryuu@allnet.ne.jp>
Cc: freebsd-net@FreeBSD.ORG
Subject: Re: /kernel: arp: message appearing
In-Reply-To: <005e01c03e44$7a3907b0$0201a8c0@dorei>
Message-ID: <Pine.BSF.4.21.0010242329340.73291-100000@pizza.monkeybrains.net>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-net@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org



On Wed, 25 Oct 2000, kouryuu wrote:

_Thanks.
_
_I tried to filter the messages out with
_
_ipfw add deny all from 192.168.0.0 to <my_external_ip>
_> >/kerel: arp: 192.168.1.97 is on dc0 but got reply from <mac address(?)>


Try:

  ipfw add deny all from 192.168.0.0/16 to any in via EXTERNAL_DEVICE
You forgot the netmask.

Also, you could add the following:
  ipfw add deny all from 192.168.0.0/16 to any out via EXTERNAL_DEVICE
If you notice the count go up when you do ipfw show, you'll be able to
deduce you have another problem.

Rudy




To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-net" in the body of the message