Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 5 Sep 2000 13:05:20 -0700
From:      Caleb Walker <cwalker@cwalk.org>
To:        Spades <spades@galaxynet.org>, freebsd-questions@FreeBSD.ORG
Subject:   Re: High usage processes
Message-ID:  <0009051312020P.00254@butthead.walker>
In-Reply-To: <3.0.32.20000906031850.0096d100@smtp.magix.com.sg>
References:  <3.0.32.20000906031850.0096d100@smtp.magix.com.sg>

next in thread | previous in thread | raw e-mail | index | archive | help
-----BEGIN PGP SIGNED MESSAGE-----

I am by no means a firewall expert but I just got mine up working and I
havent seen anyone reply so I thought I would put my one or two cents
in.
Is there a specific reason you put the index numbers in at 60?
Maybe try them with out the index numers. And if you have logging
turned on in your kernel you could put a log command in there as well
and see if it loggs anything.

ipfw add deny log icmp from 24.141.116.0/24 to any in

Another thing is who is the 24 address?  Is it someone on the outside
network(Internet) trying to ping your firewall?
Who is the 'any' going to be?  What is the layout of who and what do you
want ot block ?
I hope I am wording this well...

On Tue, 05 Sep 2000, Spades wrote:
#I wish to block ICMP from these2 IPs, i added
#
#ipfw add 60 deny icmp from 24.141.116.0/24 to any in
#ipfw add 61 deny icmp from 205.149.70.0/24 to any in
#
#However, the IP still can icmp in..whats going on?
#
#
#
#
#To Unsubscribe: send mail to majordomo@FreeBSD.org
#with "unsubscribe freebsd-questions" in the body of the message
--

Thank You,
Caleb Walker
(310) 519-8359
(310) 753-8668
http://www.cwalk.org
Get my pgp public key by fingering cwalker@cwalk.org


-----BEGIN PGP SIGNATURE-----
Version: PGPfreeware 5.0i for non-commercial use
MessageID: 752fXZfpoCMVSHbE3dAQST1gmkDRcQAN

iQA/AwUBObVTkh7u1vJ5ZVWEEQLkIwCdG/t4W7dlhvOiYsAaIYFxUHNmpMIAn15m
NdL+PzU3qVOK9uPGaSEOpV7I
=GczF
-----END PGP SIGNATURE-----


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?0009051312020P.00254>