From owner-freebsd-questions@FreeBSD.ORG Wed Aug 27 04:48:55 2003 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 01E1C16A4BF for ; Wed, 27 Aug 2003 04:48:55 -0700 (PDT) Received: from aviti.net (aviti.net [217.144.68.1]) by mx1.FreeBSD.org (Postfix) with ESMTP id 0658A43FF5 for ; Wed, 27 Aug 2003 04:48:54 -0700 (PDT) (envelope-from life@zone3000.net) Received: from zone3000.kharkov.ua ([217.144.68.98] helo=adserver.zone3000.net) by aviti.net with esmtp (Exim 4.14) id 19rynC-0008Bc-On for freebsd-questions@freebsd.org; Wed, 27 Aug 2003 14:48:50 +0300 Received: from narik ([10.1.1.36]) by adserver.zone3000.net with Microsoft SMTPSVC(5.0.2195.6713); Wed, 27 Aug 2003 14:54:58 +0300 Message-ID: <003601c36c91$2eb13910$2401010a@zone3000.net> From: "Vitali Malicky" To: References: <2676.193.166.135.194.1061983372.squirrel@silakka.nettikala.fi> Date: Wed, 27 Aug 2003 14:48:50 +0300 MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2600.0000 X-MIMEOLE: Produced By Microsoft MimeOLE V6.00.2600.0000 X-OriginalArrivalTime: 27 Aug 2003 11:54:58.0890 (UTC) FILETIME=[0A36E2A0:01C36C92] X-Scanner: exiscan for exim4 (http://duncanthrax.net/exiscan/) *19rynC-0008Bc-On*YXsYd3DbDhY* Subject: Re: Correct syntax for ipfw to allow local traffic? X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list Reply-To: Vitali Malicky List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 27 Aug 2003 11:48:55 -0000 > Hi all, Hi! > > I have > 00100 allow ip from any to any via lo0 > in my firewall script. But although I get lines like > > silakka /kernel: Connection attempt to TCP 127.0.0.1:2000 from 127.0.0.1:3914 > > into my messages log. It is jsst like the firewall although blocks local > traffic. What should I add or modify to allow traffic via loopback and/or > from and to 127.0.0.1 ? /sbin/ipfw -q add 00001 allow ip from 127.0.0.1 to 127.0.0.1 via lo0 ========= I usually configure tyhe firewall in /etc/rc.firewall. when I modify firewall rules on the remote servers I responsible of, first I make a copy of rc.firewall, say, rc.firewall.new and make all necessary changes in _this_ file, then I run "shutdown -r +5min" and only after that I execute /etc/rc.firewall.new # /etc/rc.firewall.new nohup & if it's alright and I'm still there on the server I just kill the shutdown process, if not, the machine reboots with the old rules... Best of luck! > > > Regards, > > Johan Paul > > _______________________________________________ > freebsd-questions@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.org"