From owner-freebsd-questions@FreeBSD.ORG Sat Feb 14 13:28:00 2004 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 2F67A16A4CE for ; Sat, 14 Feb 2004 13:28:00 -0800 (PST) Received: from radicalv.com (secure.radicalv.com [216.118.91.10]) by mx1.FreeBSD.org (Postfix) with SMTP id C6DB243D1F for ; Sat, 14 Feb 2004 13:27:59 -0800 (PST) (envelope-from ecrist@adtechintegrated.com) Received: (qmail 97474 invoked from network); 14 Feb 2004 21:27:52 -0000 Received: from unknown (HELO localhost.invalid) (63.228.14.245) by mail.radicalv.com with SMTP; 14 Feb 2004 21:27:52 -0000 From: Eric F Crist Organization: AdTech Integrated Systems, Inc To: FreeBSD questions List Date: Sat, 14 Feb 2004 15:27:35 -0600 User-Agent: KMail/1.6 MIME-Version: 1.0 Content-Type: multipart/signed; protocol="application/pgp-signature"; micalg=pgp-sha1; boundary="Boundary-02=_TLpLAARgA0593pL"; charset="us-ascii" Content-Transfer-Encoding: 7bit Message-Id: <200402141527.47844.ecrist@adtechintegrated.com> Subject: continued IPFW issues... (actually a lack of ability on my part) X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list Reply-To: ecrist@adtechintegrated.com List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 14 Feb 2004 21:28:00 -0000 --Boundary-02=_TLpLAARgA0593pL Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Content-Disposition: inline I'm still having some sort of issues with ipfw rules on my server. I've go= t a=20 cgi based irc client installed, and I can't connect. Also, it seems as if = my=20 DNS server isn't able to send queries out. An ipfw show displays the=20 following for me: 00050 54632 4640473 allow ip from me to any 00100 0 0 allow ip from any to any via lo0 00200 0 0 deny ip from any to 127.0.0.0/8 00300 0 0 deny ip from 127.0.0.0/8 to any 00400 4027 351563 allow ip from 63.228.14.240/29 to me 00500 2 80 allow ip from any to me dst-port 22 00600 2 80 allow ip from any to me dst-port 21 00700 388 25405 allow ip from any to me dst-port 25 00800 58 4944 allow ip from any to me dst-port 80 00900 2 80 allow ip from any to me dst-port 443 01000 2 80 allow ip from any to me dst-port 110 01100 54 4247 allow ip from any to me dst-port 53 01200 2 80 allow ip from any to me dst-port 6667 01300 2 80 allow ip from any to me dst-port 6668 01400 4 160 deny ip from not 63.228.14.240/29 to me dst-port 8080 65535 46432 7224466 deny ip from any to any Where is all that denied traffic coming from on the final rule? TIA =2D-=20 Eric F Crist AdTech Integrated Systems, Inc (612) 998-3588 --Boundary-02=_TLpLAARgA0593pL Content-Type: application/pgp-signature Content-Description: signature -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.4 (FreeBSD) iD8DBQBALpLTzdyDbTMRQIYRAqPQAJ9gZhYMXnQyxUxyUltEC5+ygxCwCgCeIzp7 ZouYCP72EJBPbe6eKhOZVDc= =UKDh -----END PGP SIGNATURE----- --Boundary-02=_TLpLAARgA0593pL--