Date: Fri, 1 Apr 2016 21:05:52 +0300 From: Odhiambo Washington <odhiambo@gmail.com> To: Carmel <carmel_ny@outlook.com> Cc: User Questions <freebsd-questions@freebsd.org> Subject: Re: IPFW Firewall Rule Message-ID: <CAAdA2WMhX6SubjFQnZzoYCc=CQM7pR50MwODEUiB1J6=MBy4Jw@mail.gmail.com> In-Reply-To: <BLU436-SMTP107E0977D507D5DD49CCB79809A0@phx.gbl> References: <BLU436-SMTP107E0977D507D5DD49CCB79809A0@phx.gbl>
next in thread | previous in thread | raw e-mail | index | archive | help
On 1 April 2016 at 13:26, Carmel <carmel_ny@outlook.com> wrote: > I have two laptops that I use when I travel. I need them to have access > to my LDAP server. I tried configuring this in my IPFW firewall rules, > but they fail: > > #!/bin/sh > cmd="ipfw -q add" > pif="em0" > > ## Lots of rules - truncated > > $cmd allow log tcp from any MAC "0C:54:A5:04:BA:DD" to me 389 in via $pif > setup keep-state > $cmd allow log tcp from any MAC "00:1A:A0:89:CA:EA" to me 389 in via $pif > setup keep-state > > This is the error message repeated twice: > > ipfw: missing ``to'' > > If I substitute an IP address and remove the "any MAC "address" it works > fine. I got this example from a web search. Can anyone tell me what I > am doing wrong? > > Setup OpenVPN on your firewall and connect to it using self-signed certs. Pretty easy! MAC addresses will not work when you are roaming. -- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254 7 3200 0004/+254 7 2274 3223 "Oh, the cruft."
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CAAdA2WMhX6SubjFQnZzoYCc=CQM7pR50MwODEUiB1J6=MBy4Jw>