Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 06 Mar 2003 09:07:36 -0500
From:      Bill Moran <wmoran@potentialtech.com>
To:        Aaron Walker <ka0ttic@cfl.rr.com>
Cc:        freebsd-questions@freebsd.org
Subject:   Re: please help: nntp and gaming with ipfw
Message-ID:  <3E675628.2090205@potentialtech.com>
In-Reply-To: <1046954586.2146.124.camel@ka0ttic>
References:  <1046954586.2146.124.camel@ka0ttic>

next in thread | previous in thread | raw e-mail | index | archive | help
Aaron Walker wrote:
> I have FreeBSD 4.7 running on my old p100 setup as a firewall..
> everything works except for 2 things: nntp (it somewhat works) and
> playing a game through the firewall from a windows box (battlefield 1942
> specifically)
> 
> With nntp I can view newsgroups but I get a lot of lag.. more like it
> freezes.. in mozilla mail when I click on a message on a newsgroup, it
> just sits there and says "Loading document..." in the status bar.
> Sometimes it works, but the majority of the time I have that problem  I
> know it is not mozilla that is the problem because I can produce it on
> my windows box with other news clients.  Here is the output of "ipfw
> show | grep 119"
> 
> 00425   30925   1359340 allow tcp from any to any 119 keep-state out
> xmit ep0 setup
> 00426       0         0 allow udp from any to any 119 keep-state out
> xmit ep0
> 00605       0         0 allow tcp from any 119 to any keep-state in recv
> ep0 setup
> 00606       0         0 allow udp from any 119 to any keep-state in recv
> ep0
> 
> if its not the firewall and these rules are ok, then what else could it
> be?

I have no idea.  There's no way to tell if those rules are OK without the
rest of the firewall rules.  Are they before or after your divert rule?  Are
there rules before them that could be cacthing traffic and handling it wrong?

> With Battlefield 1942.. it uses port 14567.  I cant get this to work at
> all.
> 
> I have the following in my firewall rules:
> 
> 00335	0	0 allow tcp from any 14567 to any keep-state out xmit ep0 setup
> 
> 00336	0	0 allow udp from any 14567 to any keep-state out xmit ep0
> 
> 00620	0	0 allow tcp from any to any 14567 keep-state in recv ep0 setup
> 
> 00621	0	0 allow udp from any to any 14567 keep-state in recv ep0

Same problem ... it's almost impossible to diagnose ifpw problems without the
entire ipfw ruleset.

> any ideas what's wrong with these rules?

I can give you 1000 guesses ...

> any help is greatly appreciated.

Please post the entire ruleset as well as the output from ifconfig.  Then we'll
have enough information to make some guesses as to what's wrong.

-- 
Bill Moran
Potential Technologies
http://www.potentialtech.com


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?3E675628.2090205>