Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 20 May 2000 22:18:15 -0400
From:      "Crist J. Clark" <cjc@cc942873-a.ewndsr1.nj.home.com>
To:        Khairuddin Abdul Ghani <abdulgha@usc.edu>
Cc:        freebsd-questions@FreeBSD.ORG
Subject:   Re: talkd error: [Error on write to talk daemon : Permission denied (13)]
Message-ID:  <20000520221815.G93357@cc942873-a.ewndsr1.nj.home.com>
In-Reply-To: <005501bfc2c9$75f37dd0$6f1f7d80@phoenix>; from abdulgha@usc.edu on Sat, May 20, 2000 at 07:08:30PM -0700
References:  <003b01bfc2c4$4f094790$6f1f7d80@phoenix> <20000520215922.F93357@cc942873-a.ewndsr1.nj.home.com> <005501bfc2c9$75f37dd0$6f1f7d80@phoenix>

next in thread | previous in thread | raw e-mail | index | archive | help
On Sat, May 20, 2000 at 07:08:30PM -0700, Khairuddin Abdul Ghani wrote:
> ----- Original Message -----
> From: "Crist J. Clark" <cjc@cc942873-a.ewndsr1.nj.home.com>
> To: "Khairuddin Abdul Ghani" <abdulgha@usc.edu>
> Cc: <freebsd-questions@FreeBSD.ORG>
> Sent: Saturday, May 20, 2000 6:59 PM
> Subject: Re: talkd error: [Error on write to talk daemon : Permission denied
> (13)]
> 
> 
> >     00200 deny ip from any to 127.0.0.0/8
> 
> Any legit traffic being blocked by this should be accepted in your
> rule 100.
> 
> . I know.. Could it possible be all those static routes I added? I kinda did
> something like
> 
>     route add -host xxx.25.134.3 -interface fxp0
> 
> for all the aliased IPs.

I think just using,

  # ifconfig fxp0 inet xxx.25.134.3 netmask 255.255.255.255 alias

Is the better way to go for that. It does the route for you.

> > ipfw rules:
> > 00100 allow ip from any to any via lo0
> > 00200 deny ip from any to 127.0.0.0/8
> > 00500 pipe 1 udp from any to any
> > 02000 allow tcp from any to 127.0.0.0/8 3306
> > 02100 deny tcp from any to any 3306 <-- deny remote sql requests.
> > 65000 allow ip from any to any
> > 65535 allow ip from any to any
> 
> What the heck is 2000?
> 
> . That's to allow local connections to sql? I think? :P

That should not be needed if 100 is working, and it is pointless if
200 was working, packets would never reach it.

> > netstat -nr:
> > Internet:
> > Destination        Gateway            Flags      Netif Expire
> > default            216.65.57.1        UGSc       fxp0
> > xxx.25.134         link#1             UC         fxp0 =>
> > xxx.25.134.1       0:a0:c9:e8:c3:1f   UHLW       fxp0   1114
> > xxx.25.134.2       0:90:27:ad:45:5d   UHLS        lo0
> > xxx.25.134.3       0:90:27:ad:45:5d   UHLS       fxp0
> > .
> > .
> > yyy.65.57          link#1             UC         fxp0 =>
> > yyy.65.57.1        0:a0:c9:e8:c3:1f   UHLW       fxp0   1186
> > yyy.65.57.2        0:90:27:ad:45:5d   UHLW        lo0
> > yyy.65.57.3        0:90:27:ad:45:5d   UHLS       fxp0
> > .
> > .
> > yyy.65.57.255      ff:ff:ff:ff:ff:ff  UHLWb      fxp0
> 
> Where is the loopback configuration in this? There should be a line
> like,
> 
>   127.0.0.1          127.0.0.1          UH         lo0
> 
> What does,
> 
>   $ ifconfig lo0
> 
> Return?
> 
> . that command returns
> 
> lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> mtu 16384
>         inet6 fe80::1%lo0 prefixlen 64 scopeid 0x5
>         inet6 ::1 prefixlen 128
> 
> Although you're right, there should be something more.. :(

Yep,

  # ifconfig lo0 inet 127.0.0.1

Should fix you up. Do you have,

  network_interfaces="fxp0 lo0"
  ifconfig_lo0="inet 127.0.0.1"

In rc.conf? That should set things up right at reboots.
-- 
Crist J. Clark                           cjclark@home.com


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20000520221815.G93357>