From owner-freebsd-questions Sun Dec 22 15:22:53 2002 Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 45E1637B401 for ; Sun, 22 Dec 2002 15:22:52 -0800 (PST) Received: from sage.thought.org (dsl231-043-140.sea1.dsl.speakeasy.net [216.231.43.140]) by mx1.FreeBSD.org (Postfix) with ESMTP id 83FE243ED8 for ; Sun, 22 Dec 2002 15:22:51 -0800 (PST) (envelope-from kline@thought.org) Received: from thought.org (root@tao [10.0.0.247]) by sage.thought.org (8.11.4/8.11.4) with ESMTP id gBMNMo200440; Sun, 22 Dec 2002 15:22:50 -0800 (PST) (envelope-from kline@thought.org) Received: (from kline@localhost) by thought.org (8.12.6/8.11.3) id gBMNMoKt078443; Sun, 22 Dec 2002 15:22:50 -0800 (PST) (envelope-from kline) Date: Sun, 22 Dec 2002 15:22:50 -0800 From: Gary D Kline To: MikeM Cc: FreeBSD Mailing List Subject: Re: Any IPFW clues??? Message-ID: <20021222232250.GB78387@tao.thought.org> References: <20021222230535.GA78303@tao.thought.org> <200212221819120744.00412498@home.24cl.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <200212221819120744.00412498@home.24cl.com> X-Organization: Thought Unlimited. Public service Unix since 1986. X-Of_Interest: Observing 16 years of service to the Unix community User-Agent: Mutt/1.5.1i Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG On Sun, Dec 22, 2002 at 06:19:12PM -0500, MikeM wrote: > > > On 12/22/2002 at 3:05 PM Gary D Kline wrote: > | I'm trying to switch from ipfilter to ipfw. With the former, > | things work. When I comment out the ipf* lines in /etc/rc.conf > | and enable the ipfw lines (and reboot) not even ping works. > | I've tried pining ns1.thought.org and get the "No route to host" > | error. (!) > | > | Anbody ever have this happen and understand what I'm breaking? > | And how-to fix it? > ============= > > What does your rules file look like? > > By default, ipfw blocks everything, unless you've enabled the > DEFAULT_TO_ACCEPT option in the kernel config. > Yeah, I saw that "DEFAULT"; mine is to ACCEPT... gary PS: rules just posted. -- Gary Kline kline@thought.org www.thought.org Public service Unix To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message