From owner-freebsd-questions  Thu Mar  7  7:42:56 2002
Delivered-To: freebsd-questions@freebsd.org
Received: from mail003.syd.optusnet.com.au (mail003.syd.optusnet.com.au [203.2.75.251])
	by hub.freebsd.org (Postfix) with ESMTP id 7F60137B400
	for <freebsd-questions@FreeBSD.ORG>; Thu,  7 Mar 2002 07:42:43 -0800 (PST)
Received: from optusnet.com.au ([198.142.182.150])
	by mail003.syd.optusnet.com.au (8.11.1/8.11.1) with ESMTP id g27Fgf522937
	for <freebsd-questions@FreeBSD.ORG>; Fri, 8 Mar 2002 02:42:41 +1100
Message-ID: <3C878B42.9FF600A6@optusnet.com.au>
Date: Fri, 08 Mar 2002 01:46:10 +1000
From: Ian Pulsford <ianjp@optusnet.com.au>
X-Mailer: Mozilla 4.76 [en] (X11; U; FreeBSD 4.5-STABLE i386)
X-Accept-Language: en
MIME-Version: 1.0
To: "freebsd-questions@FreeBSD.ORG" <freebsd-questions@FreeBSD.ORG>
Subject: pppd pass-filter
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-questions.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-questions>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-questions>
X-Loop: FreeBSD.ORG

Hi,

I'm trying to put some filters on pppd as added protection (not
replacing ipfw), but they don't seem to have any effect.

Here is what I have at the moment in /etc/ppp/options :

pass-filter '
        !(inbound && dst port 20) &&
        !(inbound && dst port 21) &&
        !(inbound && dst port 22) &&
        !(inbound && dst port 80) &&
        !(inbound && dst port 111) &&
        !(inbound && dst port 139) &&
        !(inbound && dst port 2049) &&
        !(inbound && dst port 3128) &&
        !(inbound && dst port 5801) &&
        !(inbound && dst port 5901) &&
        !(inbound && dst port 6001) &&
        !(inbound && dst port 8000) &&
        !(inbound && dst port 8001)
        '

I dropped my ipfw and used a couple of online firewall testers but they
indicated that the ports were open so I assume my pppd filters aren't
working.  PPP_FILTER is in my kernel.

Any help appreciated.


Ian

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message