From owner-freebsd-questions  Fri Jan 11 12: 5:13 2002
Delivered-To: freebsd-questions@freebsd.org
Received: from web14804.mail.yahoo.com (web14804.mail.yahoo.com [216.136.224.220])
	by hub.freebsd.org (Postfix) with SMTP id 17CC037B404
	for <freebsd-questions@freebsd.org>; Fri, 11 Jan 2002 12:05:08 -0800 (PST)
Message-ID: <20020111200507.5340.qmail@web14804.mail.yahoo.com>
Received: from [207.139.167.27] by web14804.mail.yahoo.com via HTTP; Fri, 11 Jan 2002 12:05:07 PST
Date: Fri, 11 Jan 2002 12:05:07 -0800 (PST)
From: Chris Appleton <appleton_chris@yahoo.com>
Subject: ipfw rules
To: freebsd-questions@freebsd.org
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-questions.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-questions>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-questions>
X-Loop: FreeBSD.ORG

hate to keep coming back with this but...

i have a 4.4-release bridge setup and am able to get out anywhere but
don't seem to be able to let a port in to an ip.  i'd like tcp 21 to be
allowed in to a.b.c.d but can't seem to get through.

the ruleset:

allow ip from any a.b.c.d to any  
#could i allow a subnet here instead of the ip? a.b.c.0/24?
allow tcp from any to any established
allow udp from any 53 to any
allow tcp from any 21 to a.b.c.d
deny ip from any to any

am i missing a keep-state (don't think i can with bridge) or a frag
rule or something?

thanks advance,

chris


__________________________________________________
Do You Yahoo!?
Send FREE video emails in Yahoo! Mail!
http://promo.yahoo.com/videomail/

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message