Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 1 Oct 2003 13:18:17 -0500
From:      Gary <gv-list-freebsdquestions@mygirlfriday.info>
To:        FreeBSD <questions@freebsd.org>
Subject:   Firewall problem
Message-ID:  <20031001181817.21832.qmail@letric.mygirlfriday.info>

next in thread | raw e-mail | index | archive | help
I have set my firewall to

firewall_type="open"
firewall_enable="YES"

and when I want to drop a specific IP, I enter it manually, it accepts it,
but it does not drop the packets.. 

I am getting a lot of virus activity on my SMTP port 25. So I wanted to
drop a few IP ranges/addresses..

00100  62054   5483792 allow ip from any to any via lo0
00200      0         0 deny ip from any to 127.0.0.0/8
00300      0         0 deny ip from 127.0.0.0/8 to any
65000 873327 293931424 allow ip from any to any
65100      0         0 deny tcp from 24.92.226.153 to any
65110      0         0 deny ip from 213.191.102.86 to any           
65535      0         0 deny ip from any to any

Yet, checking later in my SMTP logs, I am still getting pounded by the
listed addresses. Can anyone explain why this isn't working?

Thanks,

-- 
Gary



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20031001181817.21832.qmail>