Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 20 Nov 2003 14:47:38 +0100
From:      Ruben de Groot <mail25@bzerk.org>
To:        Chip <chip@wiegand.org>
Cc:        FreeBSD Questions List <questions@freebsd.org>
Subject:   Re: firewall rules do not get read
Message-ID:  <20031120134738.GA85873@ei.bzerk.org>
In-Reply-To: <3FBC535A.6020904@wiegand.org>
References:  <3FBC535A.6020904@wiegand.org>

next in thread | previous in thread | raw e-mail | index | archive | help
On Wed, Nov 19, 2003 at 09:38:34PM -0800, Chip typed:
> I noticed my firewall rules are not being read. I have rc.conf set to 
> read the file rc.firewall. In rc.firewall the first line is add divert 
> natd etc etc. that is followed by pass all from any to any etc etc. Then 
> nothing after that is read, it is all ignored.

My guess is you're using ipfw and confusing it with ipfilter.
In ipfw, processing stops at the first rule that matches. Your "all
from any to any" rule matches everything, so all subsequent rules 
are never reached. Try moving this rule to the end of your
firewall script.

Ruben

> If I comment out the line pass all from any to any then nothing works to 
> access the internet.
> I don't know what to do to make it read past those first two lines.
> Any suggestions?
> 
> 
> 
> 
> _______________________________________________
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.org"



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20031120134738.GA85873>