From owner-freebsd-questions Tue Sep 25 19:40:42 2001 Delivered-To: freebsd-questions@freebsd.org Received: from cody.jharris.com (cody.jharris.com [205.238.128.83]) by hub.freebsd.org (Postfix) with ESMTP id 521BD37B414 for ; Tue, 25 Sep 2001 19:40:38 -0700 (PDT) Received: from localhost (nick@localhost) by cody.jharris.com (8.11.1/8.9.3) with ESMTP id f8Q2eVf47550; Tue, 25 Sep 2001 21:40:31 -0500 (CDT) (envelope-from nick@rogness.net) Date: Tue, 25 Sep 2001 21:40:30 -0500 (CDT) From: Nick Rogness X-Sender: nick@cody.jharris.com To: David Kelly Cc: Bradley Oedithipus , freebsd-questions@FreeBSD.ORG Subject: Re: natd/ipfw/sshd problem. In-Reply-To: <200109260217.f8Q2Hsw17873@grumpy.dyndns.org> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG On Tue, 25 Sep 2001, David Kelly wrote: > Bradley Oedithipus writes: > > > > lightstep:~ # ipfw -a l > > 00050 1933 595146 divert 8668 ip from any to any via ed0 > > 00100 19894 995402 allow ip from any to any via lo0 > > 00200 0 0 deny ip from any to 127.0.0.0/8 > > 00250 108 6213 allow tcp from 10.0.0.0/8 to 66.100.232.202 143 > > 00300 23 1260 unreach host tcp from any to 66.100.232.202 143 > > 00500 17 972 unreach host tcp from any to 66.100.232.202 139 > > 65000 40851 7434737 allow ip from any to any > > 65535 27 1801 deny ip from any to any > > lightstep:~ # > > I find it interesting that somehow 27 packets got past 65000. Can only > assume not all of the above rules were added at the same time. It is possible for packets to arrive before the firewall rules get loaded. Nick Rogness - Keep on Routing in a Free World... "FreeBSD: The Power to Serve!" To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message