From owner-freebsd-questions Sun Apr 11 19: 3: 8 1999 Delivered-To: freebsd-questions@freebsd.org Received: from awfulhak.org (awfulhak.force9.co.uk [195.166.136.63]) by hub.freebsd.org (Postfix) with ESMTP id 5931D15214 for ; Sun, 11 Apr 1999 19:02:38 -0700 (PDT) (envelope-from brian@lan.awfulhak.org) Received: from keep.lan.Awfulhak.org (keep.lan.Awfulhak.org [172.16.0.8]) by awfulhak.org (8.9.2/8.9.2) with ESMTP id OAA06187; Sun, 11 Apr 1999 14:58:39 +0100 (BST) (envelope-from brian@lan.awfulhak.org) Received: from keep.lan.Awfulhak.org (localhost [127.0.0.1]) by keep.lan.Awfulhak.org (8.9.3/8.9.3) with ESMTP id OAA62305; Sun, 11 Apr 1999 14:58:32 +0100 (BST) (envelope-from brian@keep.lan.Awfulhak.org) Message-Id: <199904111358.OAA62305@keep.lan.Awfulhak.org> X-Mailer: exmh version 2.0.2 2/24/98 To: Christopher Michaels Cc: "FreeBSD Mailing List (E-mail)" Subject: Re: IPFW filtering on a dynamic linkup. In-reply-to: Your message of "Sun, 11 Apr 1999 01:48:17 EDT." <6C37EE640B78D2118D2F00A0C90FCB441A605C@site2s1> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Date: Sun, 11 Apr 1999 14:58:31 +0100 From: Brian Somers Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG You can kick off a script when your link comes up, passing it the IP address and interface: !bg /usr/local/bin/myscript MYADDR INTERFACE or you could use the ``set filter'' command in your config file if you just want to block things. > FreeBSD-2.2.8 > > Hello, > I've been trying to figure out how to do this with no avail. I have a > dialup link, using usermode ppp on the tun0 device. What I would like to be > able to do is filter requests going to specific ports, via the dialup link. > So for example, if someone tries to connect to my machine's telnet port (23) > it'll be filtered. I don't want to filter out requests via the fxp0 > interface though. I also do not was to filter out any requests to port 23 > going out over the tun0 device. The thing is, most of the example rules in > the ipfw config file need the machine's IP address to do this, and it is a > dynamic address. > > Also, is there anyway/anywhere that ipfw logs packets that matched a > specific rule, as in where and where it originated? > > Any help, pointers, references (other than 'man ipfw' unless you are > pointing out a specific thing I missed) would be appreciated. > -Chris > > P.S. I don't want to use tcpwrappers, citing the telnet port was just an > example. -- Brian Don't _EVER_ lose your sense of humour ! To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message