From owner-freebsd-questions@FreeBSD.ORG Sat Feb 14 10:47:19 2004 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 1142B16A4CE for ; Sat, 14 Feb 2004 10:47:19 -0800 (PST) Received: from radicalv.com (secure.radicalv.com [216.118.91.10]) by mx1.FreeBSD.org (Postfix) with SMTP id 9002B43D1F for ; Sat, 14 Feb 2004 10:47:18 -0800 (PST) (envelope-from ecrist@adtechintegrated.com) Received: (qmail 57480 invoked from network); 14 Feb 2004 18:47:12 -0000 Received: from unknown (HELO localhost.invalid) (63.228.14.245) by mail.radicalv.com with SMTP; 14 Feb 2004 18:47:12 -0000 From: Eric F Crist Organization: AdTech Integrated Systems, Inc To: freebsd-questions@freebsd.org Date: Sat, 14 Feb 2004 12:47:01 -0600 User-Agent: KMail/1.6 References: <402E6027.6010500@daleco.biz> <200402141200.23393.ecrist@adtechintegrated.com> In-Reply-To: <200402141200.23393.ecrist@adtechintegrated.com> MIME-Version: 1.0 Content-Type: multipart/signed; protocol="application/pgp-signature"; micalg=pgp-sha1; boundary="Boundary-02=_x0mLA6TVwNrqYk2"; charset="iso-8859-1" Content-Transfer-Encoding: 7bit Message-Id: <200402141247.13325.ecrist@adtechintegrated.com> cc: Barbish3@adelphia.net Subject: IPFW ruleset not working... advice? WAS Re: Running processes... X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list Reply-To: ecrist@adtechintegrated.com List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 14 Feb 2004 18:47:19 -0000 --Boundary-02=_x0mLA6TVwNrqYk2 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Content-Disposition: inline Hello all, I've got the following ruleset, but I can't ssh into my server anymore. Wh= at=20 did I miss? grog# ipfw show 00100 0 0 allow ip from any to any via lo0 00200 0 0 deny ip from any to 127.0.0.0/8 00300 0 0 deny ip from 127.0.0.0/8 to any 00400 7 1562 allow ip from 1.2.3.4/29 to me 00500 0 0 allow ip from any 22 to me 00600 0 0 allow ip from any 21 to me 00700 0 0 allow ip from any 25 to me 00800 0 0 allow ip from any 80 to me 00900 0 0 allow ip from any 443 to me 01000 0 0 allow ip from any 110 to me 01100 0 0 allow ip from any 53 to me 01200 0 0 allow ip from any 6667 to me 01300 0 0 allow ip from any 6668 to me 01400 0 0 deny ip from not 1.2.3.4/29 8080 to me 65535 101 13960 deny ip from any to any Thanks. =2D-=20 Eric F Crist AdTech Integrated Systems, Inc (612) 998-3588 --Boundary-02=_x0mLA6TVwNrqYk2 Content-Type: application/pgp-signature Content-Description: signature -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.4 (FreeBSD) iD8DBQBALm0xzdyDbTMRQIYRAjYWAKC8zQ1etdCWFw4O+gUWcE+3rkmH1gCaArkS iZdB9bryz/jXPn+vqeaAOqs= =nEQL -----END PGP SIGNATURE----- --Boundary-02=_x0mLA6TVwNrqYk2--