From owner-freebsd-questions Mon Jul 2 15:59:26 2001 Delivered-To: freebsd-questions@freebsd.org Received: from smtp015.mail.yahoo.com (smtp015.mail.yahoo.com [216.136.173.59]) by hub.freebsd.org (Postfix) with SMTP id 229CF37B401 for ; Mon, 2 Jul 2001 15:59:23 -0700 (PDT) (envelope-from dennywhite@yahoo.com) Received: from dhcp-134-29.bilcpe.cableone.net (HELO hal) (24.116.53.150) by smtp.mail.vip.sc5.yahoo.com with SMTP; 2 Jul 2001 22:59:22 -0000 X-Apparently-From: Message-ID: <000b01c1034a$7101ef60$6601a8c0@hal> From: "denny white" To: Subject: ipfw & pccard problems Date: Mon, 2 Jul 2001 17:57:22 -0500 MIME-Version: 1.0 Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 5.50.4522.1200 X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4522.1200 Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG In the ruleset at the bottom, putting in 00301 thru 00401, I was able to ping ip's but had no dns resolution, so lines 000301 thru 00401 were added. Now, when the ruleset loads, ipfw warns that interface ed1 does not exist, yet immediately afterward, that's where dmesg lists it as being at ed1. The card is a Linksys Fast Ethernet 10/100 pc card, running on my laptop, a Toshiba PII 266 Satellite. Am new to this & was wondering if it's the load order that's causing it. That is, the ruleset being loaded before the card. If it is the problem, is there a way to reverse the load order? I thought that maybe I had to create the device, but it's always ran before now, & then I read that that's one device you don't make, that it's controlled from the kernel. For info sake, the only thing I've changed in my kernel is compiling sound & firewall support in, & afterward, running the standard "open" firewall, set in /etc/rc.conf, the pc card continued to work until I tried to use the new ruleset below. Before trying firewalls, I did one cvsup to learn how & got everything built & running okay, & then too, the pc card was working. Here's the ruleset I'm trying to use: 00100 0 0 allow ip from any to any via lo0 00200 0 0 deny ip from any to 127.0.0.0/8 00300 0 0 check-state 00301 0 0 deny tcp from any to any in established 00302 0 0 allow tcp from any to any keep-state setup 00400 0 0 allow udp from 24.116.0.81 53 to any in recv ed1 00401 0 0 allow udp from 24.226.0.201 53 to any in recv ed1 65535 30 2196 deny ip from any to any Thanks for all help I can get on this. _________________________________________________________ Do You Yahoo!? Get your free @yahoo.com address at http://mail.yahoo.com To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message