From owner-freebsd-questions Tue Jul 13 2:12:41 1999 Delivered-To: freebsd-questions@freebsd.org Received: from atlrel1.hp.com (atlrel1.hp.com [156.153.255.210]) by hub.freebsd.org (Postfix) with ESMTP id DA73715237 for ; Tue, 13 Jul 1999 02:12:26 -0700 (PDT) (envelope-from MICHAEL_HEITMEIER@HP-Germany-om12.om.hp.com) Received: from isoit644.bbn.hp.com (root@isoit644.bbn.hp.com [15.136.88.78]) by atlrel1.hp.com (8.8.6 (PHNE_17135)/8.8.5tis) with ESMTP id FAA23132 for ; Tue, 13 Jul 1999 05:11:25 -0400 (EDT) From: MICHAEL_HEITMEIER@HP-Germany-om12.om.hp.com Received: from localhost (root@localhost) by isoit644.bbn.hp.com (8.8.6 (PHNE_14041)/8.8.6 TIS Openmail) with SMTP id LAA02793 for freebsd-questions@freebsd.org; Tue, 13 Jul 1999 11:11:51 +0200 (METDST) X-OpenMail-Hops: 1 Date: Tue, 13 Jul 1999 11:11:43 +0200 Message-Id: Subject: PPP and Filter Setup Question MIME-Version: 1.0 To: freebsd-questions@freebsd.org Cc: HEITMEIER_MICHAEL/HP-Germany_om12@isoit644.bbn.hp.com Content-Type: text/plain; charset=US-ASCII; name="BDY.TXT" Content-Disposition: inline; filename="BDY.TXT" Content-Transfer-Encoding: 7bit Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG Hi all, to keep my NT laptop from dialing my ISP when it's connected to my home network I enabled TCP/IP logging in /etc/ppp/ppp.conf and duly received the following log entry: Jul 12 21:07:11 gimli ppp[7478]: tun0: TCP/IP: DIAL UDP: 10.0.0.4:137 ---> 15.180.3.114:137 Gimli is the gateway, 10.0.0.4 is the address of the laptop in my home environment. I tried to find out what process still wants to access 15... but did not find anything, certainly nothing I can see from my network configuration (DNS and WINS are disabled), the only gateway is 10.0.0.1 (gimli). Based on this I set the following entry in /etc/ppp/ppp.conf: set filter dial 0 deny udp src eq 137 At first (when the laptop adapter indicated it was accessing the network) it looked like success when ppp did not dial, but then I found that this filter apparently blocked ALL dial out traffic... :-( Jul 12 22:07:50 gimli ppp[7483]: tun0: TCP/IP: DIAL UDP: 10.0.0.4:1046 ---> 15.181.150.30:53 - BLOCKED Jul 12 22:09:15 gimli ppp[7483]: tun0: TCP/IP: DIAL UDP: 10.0.0.4:137 ---> 15.128.15.115:137 - BLOCKED Jul 12 22:34:44 gimli ppp[7483]: tun0: TCP/IP: DIAL UDP: 10.0.0.2:1029 ---> 145.253.2.11:53 - BLOCKED What am I doing wrong? There is very little information about the definition of 'src' in man ppp so I'm not sure if what I'm doing is even correct. What are the numbers behind the IP address anyway (1046,137,1029)? Thanks for any help, Michael To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message