From owner-freebsd-questions Tue Sep 25 19: 5:29 2001 Delivered-To: freebsd-questions@freebsd.org Received: from cody.jharris.com (cody.jharris.com [205.238.128.83]) by hub.freebsd.org (Postfix) with ESMTP id 65E6137B40C for ; Tue, 25 Sep 2001 19:05:24 -0700 (PDT) Received: from localhost (nick@localhost) by cody.jharris.com (8.11.1/8.9.3) with ESMTP id f8Q25HX47396; Tue, 25 Sep 2001 21:05:18 -0500 (CDT) (envelope-from nick@rogness.net) Date: Tue, 25 Sep 2001 21:05:17 -0500 (CDT) From: Nick Rogness X-Sender: nick@cody.jharris.com To: Bradley Oedithipus Cc: freebsd-questions@FreeBSD.ORG Subject: Re: natd/ipfw/sshd problem. In-Reply-To: Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG On Tue, 25 Sep 2001, Bradley Oedithipus wrote: [snip] > lightstep:~ # ipfw -a l > 00050 1933 595146 divert 8668 ip from any to any via ed0 > 00100 19894 995402 allow ip from any to any via lo0 > 00200 0 0 deny ip from any to 127.0.0.0/8 > 00250 108 6213 allow tcp from 10.0.0.0/8 to 66.100.232.202 143 > 00300 23 1260 unreach host tcp from any to 66.100.232.202 143 > 00500 17 972 unreach host tcp from any to 66.100.232.202 139 > 65000 40851 7434737 allow ip from any to any > 65535 27 1801 deny ip from any to any > lightstep:~ # > > I have no options passed to natd Yes, natd is running. Yes, I can > access everything from the inside to the outside regardless of the > ipfw rules (must be open tho) BUT, in order to access the outside from > the subnet (not the server) the divert rule shown above MUST be in > place exactly as it is. That is why i dont think that i am blocking > ports. If i was blocking port 22, nmap (from a remote machine) would > at least show that port 22 was being filtered. But it doesnt, it > doesnt show it at all. This is a tad wierd. Does ftp or telnet or anything else work from the outside. Nick Rogness - Keep on Routing in a Free World... "FreeBSD: The Power to Serve!" To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message