Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 07 Jun 2001 14:12:29 -0400
From:      "Antoine Beaupre (LMC)" <Antoine.Beaupre@ericsson.ca>
To:        "Karsten W. Rohrbach" <karsten@rohrbach.de>
Cc:        freebsd-security@FreeBSD.ORG
Subject:   Re: IPFW rules > ports still open!
Message-ID:  <3B1FC40D.68911B9D@lmc.ericsson.se>
References:  <Pine.BSF.4.30_heb2.09.0106061220000.50496-100000@slis-two.lis.fsu.edu><009e01c0ef55$da422340$9201a8c0@home.net><1569370004.20010607180037@mail.spbnit.ru><0e4001c0ef5c$034299e0$241da8c0@ke.balt.net><20010607190013.4a57045e.nikolaj@mail.spbnit.ru><02ab01c0ef6b$b1002610$0900a8c0@windows> <42123753718.20010607201244@sandy.ru> <02de01c0ef74$79397f70$0900a8c0@windows> <20010607200615.P59617@mail.webmonster.de>

next in thread | previous in thread | raw e-mail | index | archive | help
FWIW, I had some problems adding rules in the format:

allow tcp from any to ip 22,3932-32023

I think the parser needs revision...

But you have a good hint there, putting the rules in the same rule #

A.

"Karsten W. Rohrbach" wrote:
> 
> Marcel Dijk(nascar24@home.nl)@2001.06.07 19:08:29 +0000:
> > > M> add 615 allow tcp from any to MY_IP 22,5618,10000
> > > M> add 625 allow tcp from MY_IP to any
> try:
> 
> add 615 allow tcp from any to MY_IP 22
> add 615 allow tcp from any to MY_IP 5618
> add 615 allow tcp from any to MY_IP 10000
> add 625 allow tcp from MY_IP to any
> 
> perhaps there exist some side effects in the rule parser?
> 
> /k
> 
> --
> > God isn't dead -- he's been busted.
> KR433/KR11-RIPE -- WebMonster Community Founder -- nGENn GmbH Senior Techie
> http://www.webmonster.de/ -- ftp://ftp.webmonster.de/ -- http://www.ngenn.net/
> karsten&rohrbach.de -- alpha&ngenn.net -- alpha&scene.org -- catch@spam.de
> GnuPG 0x2964BF46 2001-03-15 42F9 9FFF 50D4 2F38 DBEE  DF22 3340 4F4E 2964 BF46
> 
>   ------------------------------------------------------------------------
>    Part 1.2Type: application/pgp-signature

--
La sémantique est la gravité de l'abstraction.

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?3B1FC40D.68911B9D>