From owner-freebsd-questions Mon Oct 5 19:34:59 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id TAA06939 for freebsd-questions-outgoing; Mon, 5 Oct 1998 19:34:59 -0700 (PDT) (envelope-from owner-freebsd-questions@FreeBSD.ORG) Received: from ghoul.dvcmedia.com (ghoul.dvc.edu [192.235.10.252]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id TAA06910 for ; Mon, 5 Oct 1998 19:34:49 -0700 (PDT) (envelope-from webmaster@thetingroup.com) Received: from brian-desktop (c879583-a.ptbrg1.sfba.home.com [24.1.88.78]) by ghoul.dvcmedia.com (8.8.7/8.8.3) with SMTP id TAA17705 for ; Mon, 5 Oct 1998 19:33:37 -0700 (PDT) Message-ID: <000901bdf0d1$c7d38080$2a00a8c0@brian-desktop.thetingroup.com> Reply-To: "Brian" From: "Brian" To: Subject: IPFW Date: Mon, 5 Oct 1998 19:34:01 -0700 MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 4.72.3155.0 X-MimeOLE: Produced By Microsoft MimeOLE V4.72.3155.0 Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG I'm running FreeBSD 2.2.7 and have natd running with the IP Firewall enabled /etc/rc.conf FXP0=24.1.88.xxx & FXP0=192.168.0.1 --> ipfw -a l 00100 31163 20091250 divert 6668 ip from any to any via fxp0 00100 130 14898 allow ip from any to any via lo0 00200 0 0 deny ip from any to 127.0.0.0/8 00300 0 0 deny log tcp from 24.0.0.0/8 to any 1-21 in recv fxp0 00400 0 0 deny log tcp from 24.0.0.0/8 to any 23-52 in recv fxp0 00500 0 0 deny log tcp from 24.0.0.0/8 to any 56-109 in recv fxp0 00600 0 0 deny log tcp from 24.0.0.0/8 to any 111-1023 in recv fxp0 00700 0 0 deny log tcp from 24.0.0.0/8 to 24.0.0.0/8 1026-65000 in recv fxp0 65000 62854 40131837 allow ip from any to any 65535 0 0 deny ip from any to any Now my question is how would I tell it to allow any and everthing from 24.1.122.xxx I have tryed to put that segment in as allow $fwcmd add allow all from 24.1.122.0/24 to any in via fxp0 & $fwcmd add allow all from 24.1.122.0/24 to any I have tryed both but lines still will not let anything from 24.1.122.xxx segment in. Thanks Brian To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message