Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 9 Nov 1997 19:44:20 +1100 (EST)
From:      "Daniel O'Callaghan" <danny@panda.hilink.com.au>
To:        Richard Furda <rfurda@wgss.net>
Cc:        "Jordan K. Hubbard" <jkh@time.cdrom.com>, bugs@FreeBSD.ORG
Subject:   Re: Firewall
Message-ID:  <Pine.BSF.3.91.971109193925.253M-100000@panda.hilink.com.au>
In-Reply-To: <3.0.3.32.19971108211718.00689454@wgss.net>

next in thread | previous in thread | raw e-mail | index | archive | help

On Sat, 8 Nov 1997, Richard Furda wrote:

> I am trying to get my firewall to work. I think that /etc/rc.firewall is
> broken.
> 
> First, the versions:
> 
> FreeBSD gator.wgss.net 2.2.5-STABLE FreeBSD 2.2.5-STABLE #0: Sat Nov  8
> 17:44:52 PST 1997     riso@gator.wgss.net:/usr/src/sys/compile/custom  i386
> 
> $Id: rc.firewall,v 1.6.2.5 1997/10/21 00:20:35 jkh Exp $
> $Id: rc.conf,v 1.1.2.29 1997/10/31 02:00:42 jdp Exp $
> 
> When firewall is specified to 'open' a very important rule is not passed out,
> ipfw add 1000 pass all from any to any

You should have in rc.conf
firewall_enable="YES"
firewall_type="open"

At rc.firewall line 71 $firewall_type is tested for values "open" and "OPEN"
and adds the line 65000 pass all from any to any.

How does this fit with what you are seeing?

Danny



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.3.91.971109193925.253M-100000>