From owner-freebsd-current Tue Jan 28 10: 2:14 2003 Delivered-To: freebsd-current@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id BB42537B401 for ; Tue, 28 Jan 2003 10:02:12 -0800 (PST) Received: from mail.tcoip.com.br (erato.tco.net.br [200.220.254.10]) by mx1.FreeBSD.org (Postfix) with ESMTP id 8750843F93 for ; Tue, 28 Jan 2003 10:02:06 -0800 (PST) (envelope-from dcs@tcoip.com.br) Received: from tcoip.com.br ([10.0.2.6]) by mail.tcoip.com.br (8.11.6/8.11.6) with ESMTP id h0SI1ce07085; Tue, 28 Jan 2003 16:01:38 -0200 Message-ID: <3E36C582.6050909@tcoip.com.br> Date: Tue, 28 Jan 2003 16:01:38 -0200 From: "Daniel C. Sobral" User-Agent: Mozilla/5.0 (X11; U; FreeBSD i386; en-US; rv:1.3a) Gecko/20030122 X-Accept-Language: en-us, en, pt-br, ja MIME-Version: 1.0 To: Oleg Baranov Cc: freebsd-current@FreeBSD.ORG Subject: Re: [5.0-RELEASE] uid option in ipfw References: <3E35D3E0.2080104@csa.ru> In-Reply-To: <3E35D3E0.2080104@csa.ru> Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit Sender: owner-freebsd-current@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG Oleg Baranov wrote: > It looks like firewall in 5.0-RELEASE doesn't respect uid option. > I migrated from 4.7 where the following lines worked fine: > > allow tcp from me to any uid 500 setup > allow udp from me to any uid 500 keep-state > > I couldn't get these lines working on 5.0 (packets don't match these > rules). > it's a little strange thing - the following lines DO work, but they > match for ANY user on the system: > > allow tcp from me to any uid 0 setup > allow udp from me to any uid 0 keep-state > > also the counters are updated in a mysterious way... > it's a very confusing thing for me. can anyone help to solve the problem > plz? It might be a network order bug. ipfw2 had lots of these. At any rate, do read the man page. 5.0's ipfw is different from 4.7's ipfw. -- Daniel C. Sobral (8-DCS) Gerencia de Operacoes Divisao de Comunicacao de Dados Coordenacao de Seguranca TCO Fones: 55-61-313-7654/Cel: 55-61-9618-0904 E-mail: Daniel.Capo@tco.net.br Daniel.Sobral@tcoip.com.br dcs@tcoip.com.br Outros: dcs@newsguy.com dcs@freebsd.org capo@notorious.bsdconspiracy.net Sturgeon's Law: 90% of everything is crud. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-current" in the body of the message