From owner-freebsd-questions Sat Jan 12 4:20:58 2002 Delivered-To: freebsd-questions@freebsd.org Received: from smtp-send.myrealbox.com (smtp-send.myrealbox.com [192.108.102.143]) by hub.freebsd.org (Postfix) with ESMTP id 8513937B419 for ; Sat, 12 Jan 2002 04:20:54 -0800 (PST) Received: from ppp8-183.ath.forthnet.gr Bernie_X@smtp-send.myrealbox.com [213.16.155.183] by smtp-send.myrealbox.com with Novell NIMS $Revision: 2.88 $ on Novell NetWare; Sat, 12 Jan 2002 05:20:53 -0700 Date: Sat, 12 Jan 2002 12:08:34 +0200 (EET) From: Bernie X-X-Sender: root@BLAST To: freebsd-questions@FreeBSD.ORG Subject: ipfw logging + rules -- newbie Message-ID: <20020112115756.C13242-100000@BLAST> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG hello, i've been trying to set ipfw on my machine... the machine connects to ISP with ppp only and i dont have lan either. in the /var/log/security i get many blocking messages, blocked by the last 'default' rule saying: /kernel: ipfw: 65435 Deny P:2 194.x.x.x 224.0.0.1 in via tun0 i did a whois on tha address and it showed it belong to my ISP. it's not the normal whois page of my isp, but one that is more tech-oriented... so, i got the following questions: 1. should i allow this ip? if i can connect to the isp with no problem, why does it want to connect to me? is this normal on dialup connections? 2. in the line above, what does the 'P:2' means? and the 244.0.0.1? 3. is there any way to see more extensive info of the firewall log, ie more details? thanks a lot regards --Bernie To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message