From owner-freebsd-questions Tue Sep 5 13:12:53 2000 Delivered-To: freebsd-questions@freebsd.org Received: from cwalk.org (cx521708-b.pv1.ca.home.com [24.177.2.144]) by hub.freebsd.org (Postfix) with ESMTP id 24B3337B422 for ; Tue, 5 Sep 2000 13:12:51 -0700 (PDT) Received: from butthead.walker (butthead.walker [192.168.1.10]) by cwalk.org (8.9.3/8.9.3) with SMTP id NAA01597; Tue, 5 Sep 2000 13:11:48 -0700 (PDT) (envelope-from cwalker@cwalk.org) From: Caleb Walker To: Spades , freebsd-questions@FreeBSD.ORG Subject: Re: High usage processes Date: Tue, 5 Sep 2000 13:05:20 -0700 X-Mailer: KMail [version 1.0.28] Content-Type: text/plain References: <3.0.32.20000906031850.0096d100@smtp.magix.com.sg> In-Reply-To: <3.0.32.20000906031850.0096d100@smtp.magix.com.sg> MIME-Version: 1.0 Message-Id: <0009051312020P.00254@butthead.walker> Content-Transfer-Encoding: 8bit Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG -----BEGIN PGP SIGNED MESSAGE----- I am by no means a firewall expert but I just got mine up working and I havent seen anyone reply so I thought I would put my one or two cents in. Is there a specific reason you put the index numbers in at 60? Maybe try them with out the index numers. And if you have logging turned on in your kernel you could put a log command in there as well and see if it loggs anything. ipfw add deny log icmp from 24.141.116.0/24 to any in Another thing is who is the 24 address? Is it someone on the outside network(Internet) trying to ping your firewall? Who is the 'any' going to be? What is the layout of who and what do you want ot block ? I hope I am wording this well... On Tue, 05 Sep 2000, Spades wrote: #I wish to block ICMP from these2 IPs, i added # #ipfw add 60 deny icmp from 24.141.116.0/24 to any in #ipfw add 61 deny icmp from 205.149.70.0/24 to any in # #However, the IP still can icmp in..whats going on? # # # # #To Unsubscribe: send mail to majordomo@FreeBSD.org #with "unsubscribe freebsd-questions" in the body of the message -- Thank You, Caleb Walker (310) 519-8359 (310) 753-8668 http://www.cwalk.org Get my pgp public key by fingering cwalker@cwalk.org -----BEGIN PGP SIGNATURE----- Version: PGPfreeware 5.0i for non-commercial use MessageID: 752fXZfpoCMVSHbE3dAQST1gmkDRcQAN iQA/AwUBObVTkh7u1vJ5ZVWEEQLkIwCdG/t4W7dlhvOiYsAaIYFxUHNmpMIAn15m NdL+PzU3qVOK9uPGaSEOpV7I =GczF -----END PGP SIGNATURE----- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message