From owner-freebsd-security Mon Oct 7 13:53:38 2002 Delivered-To: freebsd-security@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 9251D37B401 for ; Mon, 7 Oct 2002 13:53:37 -0700 (PDT) Received: from alcanet.com.au (mail2.alcanet.com.au [203.62.196.17]) by mx1.FreeBSD.org (Postfix) with ESMTP id B79E543E75 for ; Mon, 7 Oct 2002 13:53:35 -0700 (PDT) (envelope-from peter.jeremy@alcatel.com.au) Received: from sydsmtp01.alcatel.com.au (IDENT:root@localhost.localdomain [127.0.0.1]) by alcanet.com.au (8.12.4/8.12.4/Alcanet1.3) with ESMTP id g97Kr9uA013534; Tue, 8 Oct 2002 06:53:33 +1000 Received: from gsmx07.alcatel.com.au ([139.188.20.247]) by sydsmtp01.alcatel.com.au (Lotus Domino Release 5.0.11) with ESMTP id 2002100806530818:7026 ; Tue, 8 Oct 2002 06:53:08 +1000 Received: from gsmx07.alcatel.com.au (localhost [127.0.0.1]) by gsmx07.alcatel.com.au (8.12.5/8.12.5) with ESMTP id g97Kr72t079934; Tue, 8 Oct 2002 06:53:07 +1000 (EST) (envelope-from peter.jeremy@alcatel.com.au) Received: (from jeremyp@localhost) by gsmx07.alcatel.com.au (8.12.5/8.12.5/Submit) id g97Kr7VO079933; Tue, 8 Oct 2002 06:53:07 +1000 (EST) (envelope-from peter.jeremy@alcatel.com.au) Date: Tue, 8 Oct 2002 06:53:07 +1000 From: Peter Jeremy To: Aragon Gouveia Cc: freebsd-security@FreeBSD.ORG Subject: Re: ipfw stateful help - strange behaviour Message-ID: <20021007205307.GF495@gsmx07.alcatel.com.au> Mail-Followup-To: Aragon Gouveia , freebsd-security@FreeBSD.ORG References: <20021004153554.GD5787@phat.za.net> Mime-Version: 1.0 In-Reply-To: <20021004153554.GD5787@phat.za.net> User-Agent: Mutt/1.4i X-MIMETrack: Itemize by SMTP Server on SYDSMTP01/AlcatelAustralia(Release 5.0.11 |July 24, 2002) at 08/10/2002 06:53:08 AM, Serialize by Router on SYDSMTP01/AlcatelAustralia(Release 5.0.11 |July 24, 2002) at 08/10/2002 06:53:33 AM, Serialize complete at 08/10/2002 06:53:33 AM Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org On 2002-Oct-04 17:35:54 +0200, Aragon Gouveia wrote: >I'm having a problem with ipfw's stateful operation which I can't quite >figure out. Let me start with my ruleset. > >00100 check-state >00500 allow tcp from any to 66.8.x.y 80 keep-state setup >01000 deny tcp from any to 66.8.x.y 80 >65535 allow ip from any to any Are you running NAT as well? Peter To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message