Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 24 Dec 1998 01:53:51 -0800 (PST)
From:      dima@best.net (Dima Ruban)
To:        reichert@numachi.com (Brian Reichert)
Cc:        freebsd-security@FreeBSD.ORG
Subject:   Re: IPFW configuration question
Message-ID:  <199812240953.BAA19489@burka.rdy.com>
In-Reply-To: <19981224021632.D29742@numachi.com> from Brian Reichert at "Dec 24, 1998  2:16:32 am"

next in thread | previous in thread | raw e-mail | index | archive | help
Brian Reichert writes:
> 
> You might want ping:
> 
> 	$fwcmd add allow icmp from any to any

If you just want to use ping, I'd rather suggest specifying icmptypes/

> What I'm using for traceroute, which I'm not convinced is totally
> correct:
> 
> 	$fwcmd add allow udp from any to any 33434-33534

You might want to put: $fwcmd add allow udp from any to any 33434-33534 out
to allow outgoing traceroute only.


-- dima

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199812240953.BAA19489>