Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 01 Jun 2004 21:57:12 +0000
From:      "Lee Harr" <missive@hotmail.com>
To:        freebsd-questions@freebsd.org
Subject:   Re: IPFW Ruleset Help
Message-ID:  <BAY2-F475HL590LZ6Od00023b8a@hotmail.com>

next in thread | raw e-mail | index | archive | help
>Hello. Running FreeBSD 4.10. After I reboot with my
>new ipfw.rules I can't load any webpages. I didn't try
>by IP address cause I can't remember any off top at
>the moment.


Is the firewall logging working?

You need lines in your syslog.conf like ...

!ipfw
*.*                                             /var/log/ipfw.log



Then you can tail -f /var/log/ipfw.log

and try to access the web page. You should see packets being
blocked and figure out which rules are wrong / which rules you
need to add.

>add 00310 allow tcp from 205.152.133.254 to any in
>recv xl0
>add 00311 allow tcp from 205.152.132.235 to any in
>recv xl0
>
>add 00320 allow udp from 205.152.133.254 53 to any in
>recv xl0
>add 00321 allow udp from 205.152.132.235 53 to any in
>recv xl0
>


You let the DNS responses in, but I do not see any place
where you let your requests out.

_________________________________________________________________
Add photos to your e-mail with MSN 8. Get 2 months FREE*. 
http://join.msn.com/?page=features/featuredemail



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?BAY2-F475HL590LZ6Od00023b8a>