From owner-freebsd-questions  Tue Sep 25 19:48:30 2001
Delivered-To: freebsd-questions@freebsd.org
Received: from cx175057-a.ocnsd1.sdca.home.com (cx175057-a.ocnsd1.sdca.home.com [24.13.23.40])
	by hub.freebsd.org (Postfix) with ESMTP id 63E8437B413
	for <freebsd-questions@FreeBSD.ORG>; Tue, 25 Sep 2001 19:48:27 -0700 (PDT)
Received: from localhost (bri@localhost)
	by cx175057-a.ocnsd1.sdca.home.com (8.11.6/8.11.3) with ESMTP id f8Q2mFk61598;
	Tue, 25 Sep 2001 19:48:16 -0700 (PDT)
	(envelope-from bri@sonicboom.org)
Date: Tue, 25 Sep 2001 19:48:15 -0700 (PDT)
From: Brian Whalen <bri@sonicboom.org>
X-X-Sender:  <bri@cx175057-a.ocnsd1.sdca.home.com>
To: Nick Rogness <nick@rogness.net>
Cc: David Kelly <dkelly@hiwaay.net>,
	Bradley Oedithipus <bradley@lightstep.org>,
	<freebsd-questions@FreeBSD.ORG>
Subject: Re: natd/ipfw/sshd problem. 
In-Reply-To: <Pine.BSF.4.21.0109252137070.47372-100000@cody.jharris.com>
Message-ID: <20010925194752.S61552-100000@cx175057-a.ocnsd1.sdca.home.com>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-questions.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-questions>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-questions>
X-Loop: FreeBSD.ORG

Is anyone doing anything about that??

Brian "Sonic" Whalen
Success = Preparation + Opportunity


On Tue, 25 Sep 2001, Nick Rogness wrote:

> On Tue, 25 Sep 2001, David Kelly wrote:
>
> > Bradley Oedithipus writes:
> > >
> > > lightstep:~ # ipfw -a l
> > > 00050  1933  595146 divert 8668 ip from any to any via ed0
> > > 00100 19894  995402 allow ip from any to any via lo0
> > > 00200     0       0 deny ip from any to 127.0.0.0/8
> > > 00250   108    6213 allow tcp from 10.0.0.0/8 to 66.100.232.202 143
> > > 00300    23    1260 unreach host tcp from any to 66.100.232.202 143
> > > 00500    17     972 unreach host tcp from any to 66.100.232.202 139
> > > 65000 40851 7434737 allow ip from any to any
> > > 65535    27    1801 deny ip from any to any
> > > lightstep:~ #
> >
> > I find it interesting that somehow 27 packets got past 65000. Can only
> > assume not all of the above rules were added at the same time.
>
> 	It is possible for packets to arrive before the firewall rules get
> 	loaded.
>
> Nick Rogness <nick@rogness.net>
>  - Keep on Routing in a Free World...
>   "FreeBSD: The Power to Serve!"
>
>
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-questions" in the body of the message
>


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message