From owner-freebsd-security  Thu Sep 25 19:17:19 1997
Return-Path: <owner-freebsd-security>
Received: (from root@localhost)
          by hub.freebsd.org (8.8.7/8.8.7) id TAA29846
          for security-outgoing; Thu, 25 Sep 1997 19:17:19 -0700 (PDT)
Received: from ns.mt.sri.com (SRI-56K-FR.mt.net [206.127.65.42])
          by hub.freebsd.org (8.8.7/8.8.7) with ESMTP id TAA29835
          for <security@freebsd.org>; Thu, 25 Sep 1997 19:17:09 -0700 (PDT)
Received: from rocky.mt.sri.com (rocky.mt.sri.com [206.127.76.100])
	by ns.mt.sri.com (8.8.7/8.8.7) with ESMTP id UAA14105;
	Thu, 25 Sep 1997 20:17:00 -0600 (MDT)
Received: (from nate@localhost) by rocky.mt.sri.com (8.7.5/8.7.3) id UAA20908; Thu, 25 Sep 1997 20:16:54 -0600 (MDT)
Date: Thu, 25 Sep 1997 20:16:54 -0600 (MDT)
Message-Id: <199709260216.UAA20908@rocky.mt.sri.com>
From: Nate Williams <nate@mt.sri.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
To: Don Lewis <Don.Lewis@tsc.tdk.com>
Cc: Nate Williams <nate@mt.sri.com>, Chris Stenton <jacs@gnome.co.uk>,
        security@freebsd.org
Subject: Re: rc.firewall weakness?
In-Reply-To: <199709260009.RAA19119@salsa.gv.tsc.tdk.com>
References: <nate@mt.sri.com>
	<199709260009.RAA19119@salsa.gv.tsc.tdk.com>
X-Mailer: VM 6.29 under 19.15 XEmacs Lucid
Sender: owner-freebsd-security@freebsd.org
X-Loop: FreeBSD.org
Precedence: bulk

> You've got it, which is why I only permit UDP 53<->53 and 123<->123.

How do you do that?  You must not be using IPFW, since it really doesn't
allow the ability to permit <port>-<port>.


Nate