Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 01 Jan 2001 16:36:08 -0500
From:      "Tommy Forrest - KE4PYM" <tforrest@mcs.net>
To:        "freebsd-questions@FreeBSD.ORG" <freebsd-questions@FreeBSD.ORG>
Subject:   Writing firewall rules
Message-ID:  <200101012133.PAA09574@mailbox.mcs.net>

next in thread | raw e-mail | index | archive | help
Hi folks.

I'm a little confused about writing firewall rules.  Many of my rules
are as follows

ipfw add 1001 deny tcp from any to any 161

So I tried to do a little writing of my own.  Specfically, I want to
deny outside access (xl0) to port 901.  So I tried:

ipfw add 1099 deny tcp from xl0 to xl0 901

And it failed.  Just got a screen full of ipfw fussing at my that I'd
done the wront thing (tm).

So how would I write a rule that would block outside access to a port
while still allowing inside clients (xl1) access??


Also, why would the OS (4.0) report that a user has mail when, in
real life, they start pine and find they have no mail?  For example,
as root, I get my daily output logs in my mail box.  But when I
delete them, log out and log back in I'm told I have mail, start pine
and there is no mail.



Tommy Forrest - KE4PYM -  tforrest@mcs.net
http://www.mcs.net/~tforrest
And now, its time, for some useless, bandwidth wasting words of wisdom:
OS/2: Windows with bullet-proof glass.

PGP Public Key Fingerprint: E1FD 1327 D9D6 3D9A  6D5E 21CF 902D 41FC




To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200101012133.PAA09574>