From owner-freebsd-questions  Thu Feb 17 20:45:18 2000
Delivered-To: freebsd-questions@freebsd.org
Received: from cc942873-a.ewndsr1.nj.home.com (cc942873-a.ewndsr1.nj.home.com [24.2.89.207])
	by hub.freebsd.org (Postfix) with ESMTP id 997F137B982
	for <freebsd-questions@FreeBSD.ORG>; Thu, 17 Feb 2000 20:45:14 -0800 (PST)
	(envelope-from cjc@cc942873-a.ewndsr1.nj.home.com)
Received: (from cjc@localhost)
	by cc942873-a.ewndsr1.nj.home.com (8.9.3/8.9.3) id XAA53999;
	Thu, 17 Feb 2000 23:49:18 -0500 (EST)
	(envelope-from cjc)
Date: Thu, 17 Feb 2000 23:49:18 -0500
From: "Crist J. Clark" <cjc@cc942873-a.ewndsr1.nj.home.com>
To: Sabre <sabre@sabresdomain.com>
Cc: Omachonu Ogali <oogali@intranova.net>,
	FreeBSD Question List <freebsd-questions@FreeBSD.ORG>
Subject: Re: Quick IPFW rule help...
Message-ID: <20000217234918.D53575@cc942873-a.ewndsr1.nj.home.com>
Reply-To: cjclark@home.com
References: <Pine.BSF.4.10.10002171019060.91789-100000@hydrant.intranova.net> <Pine.BSF.4.21.0002171048370.7190-100000@sabre1.sabresdomain.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
X-Mailer: Mutt 1.0i
In-Reply-To: <Pine.BSF.4.21.0002171048370.7190-100000@sabre1.sabresdomain.com>; from sabre@sabresdomain.com on Thu, Feb 17, 2000 at 10:53:01AM -0500
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.ORG

On Thu, Feb 17, 2000 at 10:53:01AM -0500, Sabre wrote:
> I allow all outgoing connections through:
> $fwcmd add pass all from any to any out xmit ${oif}
> 
> and I allow packets to pass on the inside interface using:
> $fwcmd add pass all from any to any via ${iif}
> 
> I've actually changed the rule so that it looks like this:
> $fwcmd add pass log udp from any to any 17590-17599 in recv ${oif}
> $fwcmd add pass log tcp from any to any 17590-17599 in recv ${oif} setup
> 
> because I thought they might be doing some TCP transfers as
> well.  Basically I just need to open those ports up completely (which is
> what I thought I was doing :/ )  I'm also probably going to open the port
> for a Quake 3 server, so I need to be able to do this with the firewall :/
> TIA,

If you want to open them completely, why not just,

  $fwcmd add pass log udp from any to any 17590-17599
  $fwcmd add pass log tcp from any to any 17590-17599

-- 
Crist J. Clark                           cjclark@home.com


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message