Date: Fri, 23 Sep 2005 11:00:05 -0500 From: Hugo Osorio <osorio.hugo@gmail.com> To: Chuck Swiger <cswiger@mac.com> Cc: freebsd-ipfw@freebsd.org Subject: Re: mime contents thru ipfw Message-ID: <680ac84705092309007d69b088@mail.gmail.com> In-Reply-To: <43334E81.9080707@mac.com> References: <680ac84705082407576dd2f6b4@mail.gmail.com> <20050825084039.GH659@obiwan.tataz.chchile.org> <680ac84705082507486347b67@mail.gmail.com> <680ac847050922171856ed2904@mail.gmail.com> <43334E81.9080707@mac.com>
next in thread | previous in thread | raw e-mail | index | archive | help
gracias, our (172.24.33.0 <http://172.24.33.0>) LAN goes to internet through two proxies, the new proxy which is the one i am trying to set up, is in anothe= r network we have set routes to that LAN, (172.25.1.0 <http://172.25.1.0>) -is it inappropriate to put these address here? i hope not :s in order to be protected, we have set a firewall in this way: LAN(172.24.33.0 <http://172.24.33.0>) --> SWITCH --> fw --> Router( 172.25.19.X) --> proxy(172.25.1.5 <http://172.25.1.5>) i have the other conf (using another proxy, another network) without the string 'http://' and it works, and transfer everything. and besides, using the new proxy, without the 'http://' string, it shows bytes activity in 'ipfw show', i mean i can enter sites. For using "open firewall ruleset" do you have any basic document? another hint or help, will be appreciated, thank you. 2005/9/22, Chuck Swiger <cswiger@mac.com>: > > Hugo Osorio wrote: > > while i am navigating, after trying to load a file for attachment, in > > squirrelmail, it says: > > 'documents contains no data' > > > > after entering in hotmail service, cannot access the page of my > messages... > > it longs forever.. and nothing shows up.. > > address like this: > > > https://loginnet.passport.com/ppsecure/post.srf?id=3D2&svc=3Dmail&msppjph= =3D1&tw=3D0&fs=3D1&fsa=3D1&fsat=3D1296000&lc=3D58378&_lang=3DES&bk=3D112740= 5014 > > > > i can not make atachments, it does not transfer files when attaching > > > > has something to do with SSL, TLS or PCT? > > > > this is my conf (i have set routes, and they are fine, i think): > > 04300 471 29586 allow udp from 172.24.33.0/24 <http://172.24.33.0/24>; < > http://172.24.33.0/24>; to > > 172.25.1.5 <http://172.25.1.5>; <http://172.25.1.5>; 53 keep-state via vr= 0 > > 04500 54 3058 allow tcp from 172.24.33.0/24 <http://172.24.33.0/24>; < > http://172.24.33.0/24>; to > > 172.25.1.8 <http://172.25.1.8>; <http://172.25.1.8>; 20,21 keep-state via > vr0 > > 04600 1200 615333 allow tcp from 172.24.33.0/24 <http://172.24.33.0/24>= < > http://172.24.33.0/24>; to > > 172.25.1.5 <http://172.25.1.5>; <http://172.25.1.5>; 80,139,443,445 > keep-state via vr0 > > Those can't possibly be your actual IPFW rulesets-- the "http://" strings > in > the middle don't exist in the output from "ipfw -a l". > > It's unclear whether you are working on a client machine or box intended > as a > firewall. It's likely that you should start with the "open" firewall > ruleset, > and experiment from there, confirming that FTP access via the proxy works > properly, HTTPS access, etc. > > If you still have problems without any firewall rules in place, those wil= l > need > to be resolved before you have any realistic chance of getting a working > IPFW > ruleset going. > > It might also be the case that hanging trying to do FTP data means a PMTU > problem, see whether "ifconfig vr0 mtu 1400" helps. > > -- > -Chuck > >
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?680ac84705092309007d69b088>