Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 16 Oct 2001 09:48:29 -0500
From:      Henrik Hudson <lists@rhavenn.net>
To:        Bjarne Wichmann Petersen <mekanix@privat.dk>
Cc:        freebsd-questions@freebsd.org
Subject:   Re: Firewall not logging
Message-ID:  <200110171456.f9HEuoi58384@ashram.rhavenn.net>
In-Reply-To: <20011016111536.VWHS23247.fepA.post.tele.dk@there>
References:  <20011016085031.ZUFR22989.fepB.post.tele.dk@there> <20011016020733.F293@blossom.cjclark.org> <20011016111536.VWHS23247.fepA.post.tele.dk@there>

next in thread | previous in thread | raw e-mail | index | archive | help
They should be:

$fwcmd add allow ip from #YOURIPADDRESSHERE# to any via lo0
$fwcmd add allow ip from #YOURIPADDRESSHERE# to any via xl0

On Tuesday 16 October 2001 06:18, you wrote:
> On Tuesday 16 October 2001 11:07, Crist J. Clark wrote:
> > > # Allow all data from my network card and localhost.  Make sure you
> > > # change your network card (mine was fxp0) before you reboot.  :)
> > > $fwcmd add allow ip from any to any via lo0
> > > $fwcmd add allow ip from any to any via xl0
> >
> > All traffic is being passed by these two rules. Neither of these rules
> > log. None of the log rules that are below this are ever reached.
>
> Hmm, I've got this from
> http://www.freebsd.org/doc/en_US.ISO8859-1/articles/dialup-firewall/rules.h
>tml with a few modifications.
>
> I'm not very well versed into ipfw, but I think the idea here is that
> trafic behind the wall should go unhindered. Should I substitue "via" with
> "out xmit" instead? Just commenting those to lines out would propably give
> me a lot of headaches.
>
> Bjarne
>
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-questions" in the body of the message

-- 

Henrik Hudson
lists@rhavenn.net

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200110171456.f9HEuoi58384>