From owner-freebsd-questions Sat Mar 11 13:28:59 2000 Delivered-To: freebsd-questions@freebsd.org Received: from nscache2.x-treme.gr (mail1.x-treme.gr [212.120.196.23]) by hub.freebsd.org (Postfix) with ESMTP id 9E00B37BC4B for ; Sat, 11 Mar 2000 13:28:39 -0800 (PST) (envelope-from keramida@ceid.upatras.gr) Received: from hades.hell.gr (pat56.x-treme.gr [212.120.197.248]) by nscache2.x-treme.gr (8.9.3/8.9.3/IPNG-ADV-ANTISPAM-0.1) with SMTP id XAA13120 for ; Sat, 11 Mar 2000 23:28:30 +0200 Received: (qmail 98409 invoked by uid 1001); 11 Mar 2000 14:26:53 -0000 Date: Sat, 11 Mar 2000 16:26:53 +0200 From: Giorgos Keramidas To: Sam Carleton Cc: freebsd-questions@freebsd.org Subject: Re: ipfw is not working Message-ID: <20000311162653.D98032@hades.hell.gr> Reply-To: keramida@ceid.upatras.gr References: <38C9D32F.E8F2254A@miltonstreet.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Mailer: Mutt 1.0i In-Reply-To: <38C9D32F.E8F2254A@miltonstreet.com>; from scarleton@miltonstreet.com on Sat, Mar 11, 2000 at 12:02:36AM -0500 X-PGP-Fingerprint: 62 45 D1 C9 26 F9 95 06 D6 21 2A C8 8C 16 C0 8E X-Phone-Number: +30-94-6203692, +30-93-2886457 X-Address: Theodorou Kirinaiou 61, 26334 Patra, Greece Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG On Sat, Mar 11, 2000 at 12:02:36AM -0500, Sam Carleton wrote: > I am working on building a firewall script. First off, I have a > ipchains script that is working fine in Linux, is there some way to > eaily convert that over to ipfw? Here is the ipfw script I have so > far, real simple in my option: Try changing 'in via' to 'in recv' in the lines below: > $fwcmn add deny all from ${LOCALNET_1} to any in via ${EXTERNAL_INTERFACE} > $fwcmn add deny all from ${IPADDR} to any in via ${LOCAL_INTERFACE_1} I think it will work then... -- Giorgos Keramidas, < keramida @ ceid . upatras . gr > For my public PGP key: finger keramida@diogenis.ceid.upatras.gr PGP fingerprint, phone and address in the headers of this message. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message