Date: Tue, 25 Sep 2001 19:48:15 -0700 (PDT) From: Brian Whalen <bri@sonicboom.org> To: Nick Rogness <nick@rogness.net> Cc: David Kelly <dkelly@hiwaay.net>, Bradley Oedithipus <bradley@lightstep.org>, <freebsd-questions@FreeBSD.ORG> Subject: Re: natd/ipfw/sshd problem. Message-ID: <20010925194752.S61552-100000@cx175057-a.ocnsd1.sdca.home.com> In-Reply-To: <Pine.BSF.4.21.0109252137070.47372-100000@cody.jharris.com>
next in thread | previous in thread | raw e-mail | index | archive | help
Is anyone doing anything about that?? Brian "Sonic" Whalen Success = Preparation + Opportunity On Tue, 25 Sep 2001, Nick Rogness wrote: > On Tue, 25 Sep 2001, David Kelly wrote: > > > Bradley Oedithipus writes: > > > > > > lightstep:~ # ipfw -a l > > > 00050 1933 595146 divert 8668 ip from any to any via ed0 > > > 00100 19894 995402 allow ip from any to any via lo0 > > > 00200 0 0 deny ip from any to 127.0.0.0/8 > > > 00250 108 6213 allow tcp from 10.0.0.0/8 to 66.100.232.202 143 > > > 00300 23 1260 unreach host tcp from any to 66.100.232.202 143 > > > 00500 17 972 unreach host tcp from any to 66.100.232.202 139 > > > 65000 40851 7434737 allow ip from any to any > > > 65535 27 1801 deny ip from any to any > > > lightstep:~ # > > > > I find it interesting that somehow 27 packets got past 65000. Can only > > assume not all of the above rules were added at the same time. > > It is possible for packets to arrive before the firewall rules get > loaded. > > Nick Rogness <nick@rogness.net> > - Keep on Routing in a Free World... > "FreeBSD: The Power to Serve!" > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-questions" in the body of the message > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20010925194752.S61552-100000>