Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 15 Apr 2001 16:17:18 -0300 (ADT)
From:      The Hermit Hacker <scrappy@hub.org>
To:        <freebsd-questions@freebsd.org>
Subject:   [IPFW] writing rules ...
Message-ID:  <Pine.BSF.4.33.0104151608330.72136-100000@mobile.hub.org>

next in thread | raw e-mail | index | archive | help

Can someone confirm for me whether I'm reading something like the below
correctly?

Basically, ruleset 0107[01] will only get triggered for port !=
(20,21,873,80), as, if its something on port 20, then it will stop
processing at rule 0101[01]?

01010  1302   127709 pipe 1 tcp from ###.###.##.## 20,21 to any
01011  1298    67573 pipe 1 tcp from any to ###.###.##.## 20,21

01040   588   874583 pipe 1 tcp from ###.###.##.## 873 to any
01041   531    21248 pipe 1 tcp from any to ###.###.##.## 873

01050  7220  8202922 pipe 2 tcp from ###.###.##.## 80 to any
01051  5576   471509 pipe 2 tcp from any to ###.###.##.## 80

01070   906  1021266 pipe 2 tcp from ###.###.##.## to any
01071   786    40827 pipe 2 tcp from any to ###.###.##.##



Marc G. Fournier                   ICQ#7615664               IRC Nick: Scrappy
Systems Administrator @ hub.org
primary: scrappy@hub.org           secondary: scrappy@{freebsd|postgresql}.org


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.33.0104151608330.72136-100000>