From owner-freebsd-security  Thu Mar 20 06:10:10 1997
Return-Path: <owner-security>
Received: (from root@localhost)
          by freefall.freebsd.org (8.8.5/8.8.5) id GAA15651
          for security-outgoing; Thu, 20 Mar 1997 06:10:10 -0800 (PST)
Received: from hawk.gnome.co.uk (gnome.gw.cerbernet.co.uk [193.243.224.22])
          by freefall.freebsd.org (8.8.5/8.8.5) with ESMTP id GAA15645;
          Thu, 20 Mar 1997 06:10:03 -0800 (PST)
Received: (from jacs@localhost)
	by hawk.gnome.co.uk (8.8.5/8.8.5) id OAA00472;
	Thu, 20 Mar 1997 14:09:59 GMT
Date: Thu, 20 Mar 1997 14:09:59 GMT
From: Chris Stenton <jacs@gnome.co.uk>
Subject: ipfw with kerberos problem
To: stable@freebsd.org
Cc: security@freebsd.org
Message-Id: <jacs-9702201409.AA0002432@hawk.gnome.co.uk>
Sender: owner-security@freebsd.org
X-Loop: FreeBSD.org
Precedence: bulk



I have just activated ipfw within 2.1.7.1 with an 

add 65000 allow all from any to any rule 


However, it will not allow me to logon from the console or via telnet. 
Thankfully xdm would allow me in. If I kill kerberos then I can logon 
via telnet once initkt times out. 


Any ideas what is wrong?


Thanks

Chris