From owner-freebsd-questions Sun Oct 28 4:59:51 2001 Delivered-To: freebsd-questions@freebsd.org Received: from kabel203069.kabel.utwente.nl (kabel203069.kabel.utwente.nl [130.89.203.69]) by hub.freebsd.org (Postfix) with ESMTP id B5C7C37B408 for ; Sun, 28 Oct 2001 04:59:48 -0800 (PST) Received: by kabel203069.kabel.utwente.nl (Postfix, from userid 1000) id 79B441F30; Sun, 28 Oct 2001 13:59:39 +0100 (CET) Date: Sun, 28 Oct 2001 13:59:38 +0100 From: Rogier Steehouder To: Eric Lam Cc: freebsd-questions@freebsd.org Subject: Re: IPFW Rules Help Message-ID: <20011028135938.A622@localhost> Mail-Followup-To: Rogier Steehouder , Eric Lam , freebsd-questions@freebsd.org References: <20011026111309.B4520@localhost> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: ; from elam101083@earthlink.net on Sat, Oct 27, 2001 at 08:16:03PM -0700 Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG On 27-10-2001 20:16 (-0700), Eric Lam wrote: > Okay, let's say that I want a firewall that allows everything, but logs all > packets. How would I achieve that? (I'm ditching my old plan). > > /sbin/ipfw add allow ip from any to any via lo0 > /sbin/ipfw add allow ip from any to any via xl0 > > Somethign like that? /sbin/ipfw add allow log all from any to any Allow, but log, everything. With kind regards, Rogier Steehouder -- ___ _ -O_\ // | / Rogier Steehouder //\ / \ r.j.s@gmx.net // \ <---------------------- 25m ----------------------> To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message