Date: Thu, 20 Mar 2003 12:23:43 -0800 (PST) From: "W. J. Williams" <will@willardjwilliams.com> To: Henrik Hudson <lists@rhavenn.net>, freebsd-questions@freebsd.org Subject: Re: IPFW firewall rules not complete Message-ID: <20030320202343.36694.qmail@web13506.mail.yahoo.com> In-Reply-To: <200303201350.35462.lists@rhavenn.net>
next in thread | previous in thread | raw e-mail | index | archive | help
--- Henrik Hudson <lists@rhavenn.net> wrote: > On Thursday 20 March 2003 13:38, W. J. Williams wrote: > > I am experimenting with IPFW firewalls and have hit a roadblock. I am > > trying to allow ssh, mail, dns requests, pings and traceroutes out, > but > > not in. I am hitting a roadblock on mail and pings out > > Assuming that 192.168.0.0/29 is your internal block you've got the rules > > backwords. > > > > add 2000 allow tcp from any to 192.168.0.0/29 22,25,10000 setup > > This will let anything come in and establish a connection to a service > running > on 22, 25, 10000 but says nothing about outgoing. I think you want: > > add 2000 allow tcp from 192.168.0.0/29 to any 22,25,10000 setup > 192.168.0.0/29 is used for my wireless router, a switch, the incoming port on the firewall, and some test pcs that I donīt have behind the firewall. 192.168.1.0 is the network hosting the hosts... Does this still mean they are backwards? Will ===== Will Williams To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20030320202343.36694.qmail>