Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 27 Aug 2003 15:51:30 +0300 (EEST)
From:      "Johan Paul" <mailing-lists@johanpaul.com>
To:        "Ruben de Groot" <mail23@bzerk.org>
Cc:        freebsd-questions@freebsd.org
Subject:   Re: Correct syntax for ipfw to allow local traffic?
Message-ID:  <3376.193.166.135.194.1061988690.squirrel@silakka.nettikala.fi>
In-Reply-To: <20030827124551.GA56616@ei.bzerk.org>
References:  <2676.193.166.135.194.1061983372.squirrel@silakka.nettikala.fi> <003601c36c91$2eb13910$2401010a@zone3000.net> <20030827124551.GA56616@ei.bzerk.org>

next in thread | previous in thread | raw e-mail | index | archive | help
>>  /sbin/ipfw -q add 00001 allow ip from 127.0.0.1 to 127.0.0.1 via lo0
>
> This won't help. He allready allows "any to any via lo0".
> Anyway, it's not the firewall logging these "Connection attempt to" lines
> to /var/log/messages. What happens here is some proces tries to make a
> connection on a port where no other proces is listening. There can be many
> reasons for this. If you don't want to see these messages anymore put the
> line
>
> net.inet.tcp.log_in_vain=0
>
> in /etc/sysctl.conf

Aah, thanks!! I thought of this myself too after I noticed that the above
line didn't work either. The port 2000 that the process tries to connect
to is, I think, the Sieve port. I am not running Sieve which would explain
the situation. Well, it seems that the firewall is working properly after
all which is the most important thing.

>
> Ruben


--
Johan



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?3376.193.166.135.194.1061988690.squirrel>