From owner-freebsd-questions  Thu Nov  9 18: 1:49 2000
Delivered-To: freebsd-questions@freebsd.org
Received: from femail1.sdc1.sfba.home.com (femail1.sdc1.sfba.home.com [24.0.95.81])
	by hub.freebsd.org (Postfix) with ESMTP id 9AD9F37B4C5
	for <questions@FreeBSD.ORG>; Thu,  9 Nov 2000 18:01:46 -0800 (PST)
Received: from home.com ([24.12.186.185]) by femail1.sdc1.sfba.home.com
          (InterMail vM.4.01.03.00 201-229-121) with ESMTP
          id <20001110020129.CKZV14040.femail1.sdc1.sfba.home.com@home.com>;
          Thu, 9 Nov 2000 18:01:29 -0800
Message-ID: <3A0B5749.DA0BAFB3@home.com>
Date: Thu, 09 Nov 2000 18:02:49 -0800
From: Rob <europax@home.com>
X-Mailer: Mozilla 4.75 [en] (X11; U; FreeBSD 4.1.1-RELEASE i386)
X-Accept-Language: en
MIME-Version: 1.0
To: Mike Meyer <mwm@mired.org>
Cc: kris@grinz.com, questions@FreeBSD.ORG
Subject: Re: more firewall confusion
References: <14858.9322.986458.499779@guru.mired.org>
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.ORG

Mike Meyer wrote:
> 
> kris@grinz.com types:
> > i saw in the handbook that 'ipfw -a' will list all the rules but it
> > doesn't work.. it says invalid arguement.  Why does it not work?
> 
> Because the documentation is out of date and/or wrong.  Please provide
> a URL for that page so it can be fixed.
> 
> Try "ipfw show" instead. That's documented on the man page.
> 
> > Also, where does it log stuff like reasons why connections were not
> > made?  I have an ftp server at 192.168.1.13 and a client trying to
> > connect to it on 192.168.1.11.. the gateway for both machines is
> > 192.168.1.1.  they can ping each other but cant do anything else
> > but they can both get out to the internet.  I wanted to see on
> > 192.168.1.1 why it wasnt working but cant find a log anywhere.
> 
> Check the console, /var/log/messages and /var/log/security.
> 
>         <mike
> 
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-questions" in the body of the message


Well if you used the rc.firewall that is supplied, it doesn't contain
any "log" commands in the rules.  Dohhh!  You have to add them yourself
where needed.   See man ipfw.  Rob.


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message