From owner-freebsd-questions@FreeBSD.ORG  Fri Dec 10 20:16:20 2004
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id F246716A4CE
	for <questions@freebsd.org>; Fri, 10 Dec 2004 20:16:19 +0000 (GMT)
Received: from keymaster.look.ca (delta1.look.ca [207.136.80.9])
	by mx1.FreeBSD.org (Postfix) with ESMTP id A2C1543D31
	for <questions@freebsd.org>; Fri, 10 Dec 2004 20:16:19 +0000 (GMT)
	(envelope-from david+dated+1103141774.2a4baf@skytracker.ca)
Received: from 3s1.com ([209.161.205.12])
	by keymaster.look.ca with esmtp (Exim 4.20)
	id 1CcrBa-0004oF-De
	for questions@freebsd.org; Fri, 10 Dec 2004 20:16:18 +0000
Received: (from root@localhost)
	by 3s1.com (8.12.8p1/8.12.8) id iBAKGHSH012962
	for questions@freebsd.org; Fri, 10 Dec 2004 15:16:17 -0500 (EST)
	(envelope-from david+dated+1103141774.2a4baf@skytracker.ca)
Received: from 3s1.com (localhost [127.0.0.1])
	by 3s1.com (8.12.8p1/8.9.3) with ESMTP id iBAKGFih012930
	for <questions@freebsd.org>; Fri, 10 Dec 2004 15:16:15 -0500 (EST)
Received: (from david@localhost)
	by 3s1.com (8.12.8p1/8.12.8/Submit) id iBAKGEMh012915
	for questions@freebsd.org; Fri, 10 Dec 2004 15:16:14 -0500 (EST)
	(envelope-from david+dated+1103141774.2a4baf@skytracker.ca)
X-Authentication-Warning: 3s1.com: david set sender to
	david+dated+1103141774.2a4baf@skytracker.ca using -f
Received: by 3s1.com (tmda-sendmail, from uid 1000);
	Fri, 10 Dec 2004 15:15:58 -0500 (EST)
Date: Fri, 10 Dec 2004 15:15:50 -0500
To: Tim <Niy@extacy.homeip.net>
Message-ID: <20041210201549.GB10652@skytracker.ca>
References: <20041210013055.GA49697@skytracker.ca>
	<41B92469.8070109@extacy.homeip.net>
Mime-Version: 1.0
Content-Disposition: inline
In-Reply-To: <41B92469.8070109@extacy.homeip.net>
User-Agent: Mutt/1.4.2.1i
X-Delivery-Agent: TMDA/1.0.2 (Bold Forbes)
From: David Banning <david+dated+1103141774.2a4baf@skytracker.ca>
X-scanner: scanned by Inflex 1.0.12.3 - (http://pldaniels.com/inflex/)
X-SA-Exim-Mail-From: david+dated+1103141774.2a4baf@skytracker.ca
Content-Type: text/plain; charset=us-ascii
X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on chi.look.ca
X-Spam-Level: 
X-Spam-Status: No, hits=0.1 required=9.0 tests=FROM_HAS_MIXED_NUMS 
	autolearn=no version=2.63
X-SA-Exim-Version: 3.1 (built Tue Feb 24 05:09:27 GMT 2004)
X-SA-Exim-Scanned: Yes
cc: questions@freebsd.org
Subject: Re: gateway_enable question
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Fri, 10 Dec 2004 20:16:20 -0000

> #>ipfw add <open rule number> deny ip from any to any via <dev facing lan

but this would stop the win boxes from access the unix box via the 
network, would it not?

ipfw would be great - my main problem is that I want to block the
win boxes from using messenger which tries any and all ports,  but
I don't want to block my x-win (xwin32) terminal connection to unix
from each win box - which -also- seems to want to pick it's own port
every time it runs.
--