From owner-freebsd-ipfw@FreeBSD.ORG Thu Jun 10 22:14:31 2004 Return-Path: Delivered-To: freebsd-ipfw@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 0B8AF16A4CE for ; Thu, 10 Jun 2004 22:14:31 +0000 (GMT) Received: from mx.hostarica.com (mx.hostarica.com [196.40.45.74]) by mx1.FreeBSD.org (Postfix) with ESMTP id 187A443D55 for ; Thu, 10 Jun 2004 22:14:30 +0000 (GMT) (envelope-from jose@hostarica.com) Received: from localhost (localhost.hostarica.com [127.0.0.1]) by mx.hostarica.com (Postfix) with ESMTP id 7241DF787; Thu, 10 Jun 2004 16:18:11 -0600 (CST) Received: from [192.168.0.69] (unknown [192.168.0.69]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by mx.hostarica.com (Postfix) with ESMTP id 5D202F783; Thu, 10 Jun 2004 16:18:10 -0600 (CST) From: Jose Hidalgo Herrera To: El DaEm0n In-Reply-To: References: Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="=-ZZn9PWBiS8qkOPnAijLe" Organization: Corp. Hosta Rica Message-Id: <1086905661.30184.2.camel@jose.hostarica.net> Mime-Version: 1.0 X-Mailer: Ximian Evolution 1.4.6 Date: Thu, 10 Jun 2004 16:14:21 -0600 X-Virus-Scanned: by amavisd 0.1 X-Content-Filtered-By: Mailman/MimeDel 2.1.1 cc: freebsd-ipfw@freebsd.org cc: jose@hostarica.com Subject: Re: ipfw X-BeenThere: freebsd-ipfw@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list Reply-To: jose@hostarica.com List-Id: IPFW Technical Discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 10 Jun 2004 22:14:31 -0000 --=-ZZn9PWBiS8qkOPnAijLe Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Why do you deny traffic from and to 127/8 ? If you are worried about somebody using that addresses do this: allow ip from any to any via lo0 deny log ip from 127/8 to any=20 deny log ip from any to any=20 and then: allow ip from any to any On Thu, 2004-06-10 at 16:09, El DaEm0n wrote: > hi everyone im a newbie in IPFW i have a problem so i would explain you: >=20 > im running phpnuke in my webserver, >=20 > before, i can send mails automaticly from my server when the users =20 > registered in the portal using sendmail ,but, after i installed of IPFW= =20 > does not leave the messages >=20 > this is my rules: >=20 > deny icmp from any to me icmptypes 8 > deny ip from any to 127.0.0.0/8 > deny ip from 127.0.0.0/8 to any > allow ip from any to any > deny ip from any to any >=20 > and i added this to my kernel >=20 > options RANDOM_IP_ID > options TCP_DROP_SYNFIN > options IPSTEALTH >=20 > can somedoby help me?? and tell how can fix this problem? > thank=C2=B4s >=20 > _________________________________________________________________ > Charla con tus amigos en l=C3=ADnea mediante MSN Messenger: =20 > http://messenger.microsoft.com/es >=20 > _______________________________________________ > freebsd-ipfw@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw > To unsubscribe, send any mail to "freebsd-ipfw-unsubscribe@freebsd.org" 0100101001001000 Jose Hidalgo. Sr. IS Analyst/Sr. Unix=C2=AE SysAdmin T: +506.256.5021 x171 F: +506.256.4334 Toll free: 1.888.451.0125 x171 E: jose@hostarica.com Hostarica - Managed Collocation www.hostarica.com --=-ZZn9PWBiS8qkOPnAijLe Content-Type: application/pgp-signature; name=signature.asc Content-Description: This is a digitally signed message part -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.4 (FreeBSD) iD8DBQBAyN09Mb674RVSRIARAk8vAJ9J6uJ/yX4VspKBWE0GA6mXq/YiuQCff51e jsy6nB+er+dXg5DJT5jDyp4= =lEMu -----END PGP SIGNATURE----- --=-ZZn9PWBiS8qkOPnAijLe--