Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 22 Jul 2003 11:10:22 +0200
From:      des@des.no (Dag-Erling =?iso-8859-1?q?Sm=F8rgrav?=)
To:        obrien@FreeBSD.org
Cc:        freebsd-arch@FreeBSD.org
Subject:   Re: Things to remove from /rescue
Message-ID:  <xzpn0f76i69.fsf@dwp.des.no>
In-Reply-To: <20030721202314.GC21068@dragon.nuxi.com> (David O'Brien's message of "Mon, 21 Jul 2003 13:23:14 -0700")
References:  <20030719171138.GA86442@dragon.nuxi.com> <XFMail.20030721151553.jhb@FreeBSD.org> <20030721202314.GC21068@dragon.nuxi.com>

next in thread | previous in thread | raw e-mail | index | archive | help
"David O'Brien" <obrien@FreeBSD.org> writes:
> If I did need to get to the Internet to get bits, what does ipfw do
> for me that "sysctl net.inet.ip.fw.enable=3D0" doesn't?

ipfw -q flush
ipfw add pass ip from any to any via lo0
ipfw add check-state
ipfw add pass udp from me to any domain,ntp out keep-state
ipfw add pass tcp from me to any out setup keep-state
ipfw add deny all from any to any

DES
--=20
Dag-Erling Sm=F8rgrav - des@des.no



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?xzpn0f76i69.fsf>