Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 18 May 2009 14:04:50 +0200
From:      Sebastian Mellmann <sebastian.mellmann@net.t-labs.tu-berlin.de>
To:        freebsd-net@freebsd.org
Subject:   ipfw firewall_type 'OPEN'
Message-ID:  <1242648290.31782.9.camel@python.net.t-labs.tu-berlin.de>

next in thread | raw e-mail | index | archive | help
Hi everyone!

I've set the following parameters in rc.conf:

gateway_enable="YES"
firewall_enable="YES"
firewall_type="OPEN"
firewall_logging="YES"

When I took a look at the ruleset I see:

00010 allow ip from any to any via lo0
65000 allow ip from any to any
65535 deny ip from any to any


The problem is, if I execute my own ipfw script and flush the rules via
'ipfw -q -f flush'
and
'ipfw -q -f pipe flush'
I'm loosing my ssh connection to that machine.
Is there any chance to remove the rule 65535 or change it to allow
instead of deny?

I've got another FreeBSD machine here (7.0) where the default setting is
'65535 allow ip from any to any', when using firwall_type OPEN.
Both rc.conf files are the same!


Regards,
Sebastian




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?1242648290.31782.9.camel>