From owner-freebsd-security Wed May 9 9: 5: 4 2001 Delivered-To: freebsd-security@freebsd.org Received: from c000.sfo.cp.net (c004-h012.c004.snv.cp.net [209.228.33.76]) by hub.freebsd.org (Postfix) with SMTP id 22D3237B422 for ; Wed, 9 May 2001 09:05:01 -0700 (PDT) (envelope-from msharp@medmail.com) Received: (cpmta 7233 invoked from network); 9 May 2001 09:05:00 -0700 Date: 9 May 2001 09:05:00 -0700 Message-ID: <20010509160500.7232.cpmta@c000.sfo.cp.net> X-Sent: 9 May 2001 16:05:00 GMT Received: from [66.26.118.70] by mail.medmail.com with HTTP; 09 May 2001 09:05:00 PDT Content-Type: text/plain Content-Disposition: inline Mime-Version: 1.0 To: FreeBSD-security@FreeBSD.org From: Michael Sharp X-Mailer: Web Mail 3.7.1.9 Subject: Ip filtering with ipfw Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org I am very new to FreeBSD, and have some questions about ipfw I compiled: options IPFIREWALL into my kernel, and added: firewall_enable="YES" in /etc/rc.conf on reboot, I see ipfiltering initializing and the default policy is to deny. After reboot, I do: ipfw list and get this: 00100 allow ip from any to any via lo0 00200 deny ip from any to 127.0.0.0/8 00300 deny ip from 127.0.0.0/8 to any 65000 allow ip from any to any 65535 deny ip from any to any which I am assuming is the defaults. Now, to keep it simple, I have a router between my internal machine ( 192.168.1.3 ) and the Internet and I set the router to allow only port 113 in to 192.168.1.3 ifconfig reveals that my ethernet card is on x10 I added to ipfw: ipfw add allow tcp from 199.163.7.34 to 192.168.1.3 in via x10 ipfw add deny all from any to 192.168.1.3 0-1023 in via x10 199.163.7.34 is the ip of a DALnet IRC server that checks identd My thinking here was I only wanted 199.163.7.34 to get a identd responce on 113 and block all the others from getting a responce on 113. However, all the OTHER DALnet servers are getting a responce from 113 ( not just 199.163.7.34 ) and when I ran nmap from a friends box, it showed 113 open. What am I missing? ------------------------------------------------------- Get your free, secure email at http://www.medmail.com - the e-mail service for the medical community To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message