Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 25 Sep 1997 23:37:40 -0600 (MDT)
From:      Nate Williams <nate@mt.sri.com>
To:        "Daniel O'Callaghan" <danny@panda.hilink.com.au>
Cc:        Nate Williams <nate@mt.sri.com>, Don Lewis <Don.Lewis@tsc.tdk.com>, security@freebsd.org
Subject:   Re: rc.firewall weakness?
Message-ID:  <199709260537.XAA21334@rocky.mt.sri.com>
In-Reply-To: <Pine.BSF.3.91.970926131247.262Q@panda.hilink.com.au>
References:  <199709260216.UAA20908@rocky.mt.sri.com> <Pine.BSF.3.91.970926131247.262Q@panda.hilink.com.au>

next in thread | previous in thread | raw e-mail | index | archive | help
> > > You've got it, which is why I only permit UDP 53<->53 and 123<->123.
> > 
> > How do you do that?  You must not be using IPFW, since it really doesn't
> > allow the ability to permit <port>-<port>.
> 
> What about:
> 
> ipfw add 1000 allow udp from any 53 to 1.2.3.4 53 in

It doesn't work that way. ;(


Nate



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199709260537.XAA21334>