From owner-freebsd-security  Thu Jun  7  9: 5:10 2001
Delivered-To: freebsd-security@freebsd.org
Received: from mail4.home.nl (mail4.home.nl [213.51.129.228])
	by hub.freebsd.org (Postfix) with ESMTP id D1D0737B406
	for <freebsd-security@FreeBSD.ORG>; Thu,  7 Jun 2001 09:05:06 -0700 (PDT)
	(envelope-from nascar24@home.nl)
Received: from windows ([213.51.193.168]) by mail4.home.nl
          (InterMail vM.4.01.03.00 201-229-121) with SMTP
          id <20010607160529.WLEW407.mail4.home.nl@windows>
          for <freebsd-security@FreeBSD.ORG>;
          Thu, 7 Jun 2001 17:05:29 +0100
Message-ID: <02ab01c0ef6b$b1002610$0900a8c0@windows>
From: "Marcel Dijk" <nascar24@home.nl>
To: <freebsd-security@FreeBSD.ORG>
References: <Pine.BSF.4.30_heb2.09.0106061220000.50496-100000@slis-two.lis.fsu.edu><009e01c0ef55$da422340$9201a8c0@home.net> <1569370004.20010607180037@mail.spbnit.ru><0e4001c0ef5c$034299e0$241da8c0@ke.balt.net> <20010607190013.4a57045e.nikolaj@mail.spbnit.ru>
Subject: IPFW rules > ports still open!
Date: Thu, 7 Jun 2001 18:05:37 +0200
MIME-Version: 1.0
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 5.00.2919.6700
X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2919.6700
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-security.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo?subject=subscribe%20freebsd-security>
List-Unsubscribe: <mailto:majordomo?subject=unsubscribe%20freebsd-security>
X-Loop: FreeBSD.org

Hello,

i have tried to make a good firewall but I have some problems. This is my
rc.firewall.rules file.

add 500 allow all from 192.168.0.0/16 to any
add 525 allow all from any to 192.168.0.0/16

#add 575 allow ip from any to MY_IP
#add 600 allow ip from MY_IP to any

add 615 allow tcp from any to MY_IP 22,5618,10000
add 625 allow tcp from MY_IP to any

add 650 allow udp from any to MY_IP
add 700 allow udp from MY_IP to any

add 800 allow icmp from any to MY_IP
add 750 allow icmp from MY_IP to any

(MY_IP is my internet IP address. I have blocked it for abvious reasons)

The problem is that I can't access the services that I have allowed. For
example I can't access the service that's behind port 22 on MY_IP.
Why is this? If I allow IP from any to MY_IP and allow ip from MY_IP to any
all ports are open. And that;s just what I don't want.

I hope you guys fill me and can help me.

Thanks, I can't seem to solve this one.

Marcel


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message