From owner-freebsd-questions@FreeBSD.ORG  Wed Sep 26 20:31:23 2007
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 9591616A4EC
	for <freebsd-questions@freebsd.org>;
	Wed, 26 Sep 2007 20:31:23 +0000 (UTC) (envelope-from cswiger@mac.com)
Received: from mail-out3.apple.com (mail-out3.apple.com [17.254.13.22])
	by mx1.freebsd.org (Postfix) with ESMTP id 7C23E13C448
	for <freebsd-questions@freebsd.org>;
	Wed, 26 Sep 2007 20:31:23 +0000 (UTC) (envelope-from cswiger@mac.com)
Received: from relay12.apple.com (relay12.apple.com [17.128.113.53])
	by mail-out3.apple.com (Postfix) with ESMTP id 615EA129FF84;
	Wed, 26 Sep 2007 13:31:23 -0700 (PDT)
Received: from relay12.apple.com (unknown [127.0.0.1])
	by relay12.apple.com (Symantec Mail Security) with ESMTP id 458022804E; 
	Wed, 26 Sep 2007 13:31:23 -0700 (PDT)
X-AuditID: 11807135-a4efdbb000006e40-22-46fac19b3faa
Received: from [17.214.13.96] (cswiger1.apple.com [17.214.13.96])
	(using TLSv1 with cipher AES128-SHA (128/128 bits))
	(No client certificate requested)
	by relay12.apple.com (Apple SCV relay) with ESMTP id 27EA12804C;
	Wed, 26 Sep 2007 13:31:23 -0700 (PDT)
In-Reply-To: <82bb54530709261246p203f751fk2df592d30b003b89@mail.gmail.com>
References: <82bb54530709261246p203f751fk2df592d30b003b89@mail.gmail.com>
Mime-Version: 1.0 (Apple Message framework v752.2)
Content-Type: text/plain; charset=US-ASCII; delsp=yes; format=flowed
Message-Id: <922E2649-FBD9-4D92-8F87-84158B4537BD@mac.com>
Content-Transfer-Encoding: 7bit
From: Chuck Swiger <cswiger@mac.com>
Date: Wed, 26 Sep 2007 13:31:22 -0700
To: Chris Yocum <cyocum@gmail.com>
X-Mailer: Apple Mail (2.752.2)
X-Brightmail-Tracker: AAAAAA==
Cc: freebsd-questions@freebsd.org
Subject: Re: Dumb IPFW Question
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 26 Sep 2007 20:31:23 -0000

On Sep 26, 2007, at 12:46 PM, Chris Yocum wrote:
[ ... ]
>  I also get "Sep 26 20:09:17 routy kernel: ipfw: 450 Deny UDP <my
> router outside IP>:53 <my isp dns ip>:53 out via sis0" in my
> /var/log/security file.  I have appended the ipfw rules below so you
> can see all the changes that I made from the original.

The setup keyword should only be used with TCP packets; trying to use  
it with UDP traffic will cause your pass-through rules (#23-25) to  
not match the traffic you want them to match...

-- 
-Chuck