Date: Sat, 7 Apr 2001 00:39:38 -0700 (PDT) From: Trevin Chow <tmchow@sfu.ca> To: Nick Rogness <nick@rogness.net> Cc: <freebsd-questions@FreeBSD.ORG> Subject: Re: Natd - "failed to write packet back" Message-ID: <Pine.GSO.4.30.0104070037500.1058-100000@fraser.sfu.ca> In-Reply-To: <Pine.BSF.4.21.0104070335360.19859-100000@cody.jharris.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On Sat, 7 Apr 2001, Nick Rogness wrote: > Do a `ipfw -a l` and send it. 00100 0 0 allow ip from any to any via lo0 00200 0 0 deny ip from any to 127.0.0.0/8 00300 0 0 deny log logamount 100 ip from 192.168.0.0/16 to any in recv fxp0 00400 0 0 deny log logamount 100 ip from 192.168.0.0/16 to any in recv fxp0 00500 0 0 deny log logamount 100 ip from 172.16.0.0/12 to any in recv fxp0 00600 0 0 deny log logamount 100 ip from 10.0.0.0/8 to any in recv fxp0 00700 0 0 deny log logamount 100 ip from any to 192.168.0.0/16 in recv fxp0 00800 0 0 deny log logamount 100 ip from any to 172.16.0.0/12 in recv fxp0 00900 0 0 deny log logamount 100 ip from any to 10.0.0.0/8 in recv fxp0 01000 0 0 deny ip from 0.0.0.0/8 to any in recv fxp0 01100 0 0 deny ip from 169.254.0.0/16 to any in recv fxp0 01200 0 0 deny ip from 192.0.2.0/24 to any in recv fxp0 01300 0 0 deny ip from 224.0.0.0/4 to any in recv fxp0 01400 0 0 deny ip from 240.0.0.0/4 to any in recv fxp0 01500 0 0 deny ip from any to 0.0.0.0/8 in recv fxp0 01600 0 0 deny ip from any to 169.254.0.0/16 in recv fxp0 01700 0 0 deny ip from any to 192.0.2.0/24 in recv fxp0 01800 1 28 deny ip from any to 224.0.0.0/4 in recv fxp0 01900 0 0 deny ip from any to 240.0.0.0/4 in recv fxp0 02000 0 0 divert 8668 ip from any to any via fxp0 02100 0 0 allow tcp from any to any established 02200 0 0 allow ip from any to any via fxp1 02300 0 0 allow tcp from any to any in recv fxp0 established 02400 0 0 allow tcp from 142.58.0.0/16 to <my_ext_ip> 2626 setup 02500 0 0 allow tcp from 142.58.101.25 to <my_ext_ip> 2626 setup 02600 0 0 allow tcp from 209.53.63.29 to <my_ext_ip> 2626 setup 02700 0 0 allow log logamount 100 tcp from 142.58.101.25 to <my_ext_ip> 2627 in recv fxp0 setup 02800 0 0 allow log logamount 100 tcp from 24.71.46.74 to <my_ext_ip> 2627 in recv fxp0 setup 02900 0 0 allow log logamount 100 tcp from 209.53.63.29 to <my_ext_ip> 2627 in recv fxp0 setup 03000 0 0 allow log logamount 100 tcp from 24.113.38.121 to <my_ext_ip> 2627 in recv fxp0 setup 03100 0 0 allow tcp from any to <my_ext_ip> 80 setup 03200 0 0 allow tcp from any to <my_ext_ip> 443 setup 03300 0 0 allow tcp from any to <my_ext_ip> 25 setup 03400 0 0 allow tcp from 192.168.0.0/16 to <my_ext_ip> 143 setup 03500 0 0 allow tcp from 142.58.101.25 to <my_ext_ip> 143 setup 03600 0 0 allow tcp from 209.53.63.29 to <my_ext_ip> 143 setup 03700 0 0 allow udp from any to <my_ext_ip> 53 03800 0 0 allow udp from <my_ext_ip> 53 to any 03900 0 0 allow tcp from any to <my_ext_ip> 53 setup 04000 0 0 allow tcp from any to any 113 04100 0 0 allow log logamount 100 tcp from 209.53.63.29 to <my_ext_ip> 1241 04200 0 0 allow icmp from any to any via fxp1 04300 0 0 allow icmp from any to any in recv fxp0 icmptype 0 04400 0 0 allow icmp from any to any out xmit fxp0 icmptype 8 04500 0 0 allow icmp from any to any in recv fxp0 icmptype 3,11 04600 0 0 allow icmp from any to any via fxp0 icmptype 3,4,11,12 65532 0 0 deny log logamount 100 tcp from any to any in recv fxp0 setup 65533 0 0 deny icmp from any to any 65534 0 0 deny log logamount 100 ip from any to any 65535 2 390 deny ip from any to any To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.GSO.4.30.0104070037500.1058-100000>