From owner-freebsd-security  Fri Mar  1  6: 0: 0 2002
Delivered-To: freebsd-security@freebsd.org
Received: from heresy.dreamflow.nl (dreamflow.nl [62.58.36.22])
	by hub.freebsd.org (Postfix) with SMTP id 81AD337B402
	for <security@freebsd.org>; Fri,  1 Mar 2002 05:59:51 -0800 (PST)
Received: (qmail 52633 invoked by uid 1000); 1 Mar 2002 13:59:50 -0000
Date: Fri, 1 Mar 2002 14:59:50 +0100
From: Bart Matthaei <bart@dreamflow.nl>
To: George.Giles@mcmail.vanderbilt.edu
Cc: security@freebsd.org
Subject: Re: ipfw and DHCP
Message-ID: <20020301145949.D50583@heresy.dreamflow.nl>
References: <OF25945D77.FFDCD63C-ON86256B6F.004C1698@MC.VANDERBILT.EDU>
Mime-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-md5;
	protocol="application/pgp-signature"; boundary="zYM0uCDKw75PZbzx"
Content-Disposition: inline
User-Agent: Mutt/1.2.5.1i
In-Reply-To: <OF25945D77.FFDCD63C-ON86256B6F.004C1698@MC.VANDERBILT.EDU>; from George.Giles@mcmail.vanderbilt.edu on Fri, Mar 01, 2002 at 07:52:26AM -0600
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-security.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-security>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-security>
X-Loop: FreeBSD.org


--zYM0uCDKw75PZbzx
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Fri, Mar 01, 2002 at 07:52:26AM -0600, George.Giles@mcmail.vanderbilt.ed=
u wrote:
> How do you get ipfw to pick-up DHCP value for oif in the rc.firewall scri=
pt
> ?

There are some ways (scripting) to pass the ip from dhclient to
rc.firewall. But in a DHCP setup, I would advice you to use interfaces
in your firewall, instead of IPs.

Example:

ipfw add deny tcp from any to any 22 recv $external_interface

instead of=20

ipfw add deny tcp from any to $dhcp_ip 22

HTH.

Regards,

Bart

--=20
Bart Matthaei                 bart@dreamflow.nl=20

Kiss me twice.  I'm schizophrenic.

--zYM0uCDKw75PZbzx
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (FreeBSD)
Comment: For info see http://www.gnupg.org

iD8DBQE8f4lVgcc6pR+tCegRAuVtAKDDNzRrCAAf0+WKA+eOMiPxwIwvWACeN7b8
9Nu8BmndcZavGvyM7HEWKfM=
=0kYX
-----END PGP SIGNATURE-----

--zYM0uCDKw75PZbzx--

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message