From owner-freebsd-questions  Mon May 21 20: 9:15 2001
Delivered-To: freebsd-questions@freebsd.org
Received: from web11704.mail.yahoo.com (web11704.mail.yahoo.com [216.136.172.70])
	by hub.freebsd.org (Postfix) with SMTP id 7EAC437B422
	for <freebsd-questions@freebsd.org>; Mon, 21 May 2001 20:09:08 -0700 (PDT)
	(envelope-from tperlin@yahoo.com)
Message-ID: <20010522030908.34592.qmail@web11704.mail.yahoo.com>
Received: from [64.81.48.149] by web11704.mail.yahoo.com; Mon, 21 May 2001 20:09:08 PDT
Date: Mon, 21 May 2001 20:09:08 -0700 (PDT)
From: Tim Erlin <tperlin@yahoo.com>
Subject: Re: I need help with ipfw
To: vipor <vipor_1@hotmail.com>, freebsd-questions@freebsd.org
In-Reply-To: <OE24vNpqY1Yf1U8AVIB000059f2@hotmail.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-questions.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo?subject=subscribe%20freebsd-questions>
List-Unsubscribe: <mailto:majordomo?subject=unsubscribe%20freebsd-questions>
X-Loop: FreeBSD.ORG

What do you get if you do 'ipfw list' ?

--Tim

--- vipor <vipor_1@hotmail.com> wrote:
> Hello,
> 
> I have a freebsd 4.3 stable running natd with IPFW.
> natd_interface="ed0"
> 
> # Outside interface
> oif="ed0"
> 
> # Inside interface
> iif="xl0"
> 
> I would like to know how to set up my ipfw to allow 
> in or out  going tcp or
> udp packets !!!
> I am trying to play some online games at msn gaming
> zone --->
> http://zone.msn.com
> 
> 
> but  my lan computers are unable to do this.So I
> looked  udp /
> tcp ports that should be  open
> but i am unable to get  it to   work !!! here is all
> of the info that i
> have.
> 
>
######################################################################
> #
> # This article describes the ports required to play
> games with other players
> on the MSN
> # Gaming Zone through a firewall, proxy server,
> Network Address Translation
> (NAT),
> # or Internet Connection Sharing (ICS).
> # MORE INFORMATION
> # To play games on the MSN Gaming Zone through a
> network firewall or proxy
> server,
> # the following requirements must be met:
> # Your network administrator must configure the
> firewall or proxy server to
> allow the
> # games to pass information through the proxy server
> or firewall.
> # The following TCP ports on the firewall must be
> open:
> 
> 6667
>  28800 - 29000
> 
> Connection
> Initial TCP Connection
> 47624 Outbound
> 47624 Inbound
> Subsequent TCP Inbound
> 2300-2400
> Subsequent TCP Outbound
> 2300-2400
> Subsequent UDP Inbound
> 2300-2400
> Subsequent UDP Outbound
> 2300-2400
> 
>
######################################################
> #
> #THIS IS WHAT I HAVE TRIED BUT IT DOES NOT
> WORK...8-(
> # TCP RULES
> 
>         ${fwcmd} add pass tcp from any 6667 to any
> 6667
>         ${fwcmd} add pass tcp from any 2300-2400 to
> any  2300-2400
>         ${fwcmd} add pass tcp from any 47624 to any
> 47624
>         ${fwcmd} add pass tcp from any 28800-29000
> to any 28800-29000
> # TCP RULES
> 
>         ${fwcmd} add pass tcp from any 6667 to any
> 6667
>         ${fwcmd} add pass tcp from any 2300-2400 to
> any  2300-2400
>         ${fwcmd} add pass tcp from any 47624 to any
> 47624
>         ${fwcmd} add pass tcp from any 28800-29000
> to any 28800-2900
> 
> I am open to any suggestions!!!!!!
> and if you need any  more info just ask and i will
> try to get it..
> Thanks for taking the time to read this 8-)
> 
> laters
> VIPOR
> vipor_1@hotmail.com
> 


__________________________________________________
Do You Yahoo!?
Yahoo! Auctions - buy the things you want at great prices
http://auctions.yahoo.com/

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message