Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 23 Apr 2001 13:54:34 +0100
From:      Rasputin <rara.rasputin@virgin.net>
To:        dotslash <dotslash@linif.org>
Cc:        questions@freebsd.org
Subject:   Re: can't ping localhost
Message-ID:  <20010423135433.A17513@dogma.freebsd-uk.eu.org>
In-Reply-To: <01a501c0cbf2$578bfc90$2903010a@atg.altayer.com>; from dotslash@linif.org on Mon, Apr 23, 2001 at 04:38:10PM %2B0400
References:  <01a501c0cbf2$578bfc90$2903010a@atg.altayer.com>

next in thread | previous in thread | raw e-mail | index | archive | help
* dotslash <dotslash@linif.org> [010423 13:41]:
> i have compiled ipfilter in the kernel, applied the ipfilter patch (i'm
> using fbsd 4.2-release), rebooted and checked.  i  can ping, ftp, lynx
> remote hosts fine but i can't ping my localhost.  the default policy for
> ipfilter in my kernel is block all but i've even set a "pass in quick on xl0
> all" and "pass out quick on xl0 all" in /etc/ipf.rules and used it without

Man, you're going ot kick yourself....
xl0 isn't the interface connected to the 127.0.0.0 network.
add this right at the top of /etc/ipf.rules

# free the loopback one!
pass in quick on lo0
pass out quick on lo0

then

 ipf -Fa -f /etc/ipf.rules
 
-- 
Rasputin :: Jack of All Trades - Master of Nuns ::

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20010423135433.A17513>