From owner-freebsd-questions Fri Oct 1 7:43:15 1999 Delivered-To: freebsd-questions@freebsd.org Received: from dexter.lcsd2.org (ns1.linc2.k12.wy.us [209.181.17.10]) by hub.freebsd.org (Postfix) with ESMTP id 870D514A1C for ; Fri, 1 Oct 1999 07:42:44 -0700 (PDT) (envelope-from traviss@lcsd2.org) Received: from lcsd2.org (nobody@int-ns1.lcsd2.org [137.90.169.42]) by dexter.lcsd2.org (8.9.2/8.9.2) with SMTP id IAA18406 for freebsd-questions@freebsd.org; Fri, 1 Oct 1999 08:42:40 -0600 (MDT) (envelope-from traviss@lcsd2.org) Date: Fri, 1 Oct 1999 08:42:40 -0600 (MDT) Message-Id: <199910011442.IAA18406@dexter.lcsd2.org> To: freebsd-questions@freebsd.org Subject: ipfw filtering From: Travis Stevenson X-Mailer: LiNCNet! WebMail 1.0.1 Reply-To: tstevenson@lcsd2.org Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG I'm having some trouble setting up ipfw filtering. This is what I want to do: Block all of the internet except for one network. This is what I have done # Disable all traffic ipfw add deny all from any to any # Enable only web traffic from 192.168.1.0/24 to 10.10.10.0/24 ipfw add pass all from 192.168.1.0/24 to 10.10.10.0/24 80 ipfw add pass all from 10.10.10.0/24 80 to 192.168.1.0/24 This is the closest I could come to getting this to work. This is not working. It will drop all packets. But when I try to access 10.10.10.0/24 it says "web site contacted waiting for reply". Then hangs. The Servers are not sending data back. If anyone can provide me with some help that would be appreciated. -- Travis Stevenson, MCSE Technology Specialist Lincoln County School District #2 http://www.technology.lcsd2.org Fingerprint: CA26 B3E7 DDFC A8B8 0AA7 A559 035D AA5A 7E29 B1E4 To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message