From owner-freebsd-bugs Sat Jun 16 7:20:30 2001 Delivered-To: freebsd-bugs@hub.freebsd.org Received: from freefall.freebsd.org (freefall.freebsd.org [216.136.204.21]) by hub.freebsd.org (Postfix) with ESMTP id A736337B40A for ; Sat, 16 Jun 2001 07:20:03 -0700 (PDT) (envelope-from gnats@FreeBSD.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.11.3/8.11.3) id f5GEK3q92681; Sat, 16 Jun 2001 07:20:03 -0700 (PDT) (envelope-from gnats) Received: from mail.drkshdw.org (user4.net011.fl.sprint-hsd.net [207.30.203.4]) by hub.freebsd.org (Postfix) with ESMTP id E0A9B37B401 for ; Sat, 16 Jun 2001 07:13:54 -0700 (PDT) (envelope-from root@mail.drkshdw.org) Received: (qmail 2024 invoked by uid 0); 16 Jun 2001 14:13:52 -0000 Message-Id: <20010616141352.2023.qmail@mail.drkshdw.org> Date: 16 Jun 2001 14:13:52 -0000 From: scorpio@drkshdw.org Reply-To: scorpio@drkshdw.org To: FreeBSD-gnats-submit@freebsd.org X-Send-Pr-Version: 3.113 Subject: conf/28200: UPDATE to etc/rc.firewall Sender: owner-freebsd-bugs@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org >Number: 28200 >Category: conf >Synopsis: UPDATE to etc/rc.firewall >Confidential: no >Severity: non-critical >Priority: low >Responsible: freebsd-bugs >State: open >Quarter: >Keywords: >Date-Required: >Class: update >Submitter-Id: current-users >Arrival-Date: Sat Jun 16 07:20:02 PDT 2001 >Closed-Date: >Last-Modified: >Originator: Jeff Palmer >Release: FreeBSD 4.3-STABLE i386 >Organization: >Environment: System: FreeBSD jeff.isni.net 4.3-STABLE FreeBSD 4.3-STABLE #4: Wed May 16 12:55:48 EDT 2001 root@jeff.isni.net:/usr/obj/usr/src/sys/FreeBSD i386 >Description: In the "simple" configuration, we have the rfc1918 and draf-dodgind rules in twice. >How-To-Repeat: >Fix: Index: rc.firewall =================================================================== RCS file: /home/ncvs/src/etc/rc.firewall,v retrieving revision 1.30.2.12 diff -u -r1.30.2.12 rc.firewall --- rc.firewall 2001/03/06 01:58:02 1.30.2.12 +++ rc.firewall 2001/06/16 14:11:20 @@ -233,20 +233,6 @@ ;; esac - # Stop RFC1918 nets on the outside interface - ${fwcmd} add deny all from 10.0.0.0/8 to any via ${oif} - ${fwcmd} add deny all from 172.16.0.0/12 to any via ${oif} - ${fwcmd} add deny all from 192.168.0.0/16 to any via ${oif} - - # Stop draft-manning-dsua-03.txt (1 May 2000) nets (includes RESERVED-1, - # DHCP auto-configuration, NET-TEST, MULTICAST (class D), and class E) - # on the outside interface - ${fwcmd} add deny all from 0.0.0.0/8 to any via ${oif} - ${fwcmd} add deny all from 169.254.0.0/16 to any via ${oif} - ${fwcmd} add deny all from 192.0.2.0/24 to any via ${oif} - ${fwcmd} add deny all from 224.0.0.0/4 to any via ${oif} - ${fwcmd} add deny all from 240.0.0.0/4 to any via ${oif} - # Allow TCP through if setup succeeded ${fwcmd} add pass tcp from any to any established >Release-Note: >Audit-Trail: >Unformatted: To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-bugs" in the body of the message