From owner-freebsd-questions  Mon Mar 16 21:54:44 1998
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Received: (from majordom@localhost)
          by hub.freebsd.org (8.8.8/8.8.8) id VAA00997
          for freebsd-questions-outgoing; Mon, 16 Mar 1998 21:54:44 -0800 (PST)
          (envelope-from owner-freebsd-questions@FreeBSD.ORG)
Received: from flint.sentex.net (flint.sentex.net [199.212.134.7])
          by hub.freebsd.org (8.8.8/8.8.8) with SMTP id VAA00845
          for <questions@freebsd.org>; Mon, 16 Mar 1998 21:53:25 -0800 (PST)
          (envelope-from freebsd@flint.sentex.net)
Date: Mon, 16 Mar 1998 21:53:25 -0800 (PST)
From: freebsd@flint.sentex.net
Message-Id: <199803170553.VAA00845@hub.freebsd.org>
Subject: ipfw to filter UDP port 9 ?
To: undisclosed-recipients:;
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.ORG

Just curious as to why the rule

ipfw add 5000 deny log udp from any to any 9 in recv fxp0  

Would generate the following

Mar 17 00:36:43 iolite /kernel: ipfw: 5000 Deny UDP 204.182.161.94:8310 207.245.212.237:26981 in via fxp0 Fragment = 185
Mar 17 00:36:46 iolite /kernel: ipfw: 5000 Deny UDP 204.182.161.94:8310 207.245.212.237:26981 in via fxp0 Fragment = 185
Mar 17 00:37:37 iolite /kernel: ipfw: 5000 Deny UDP 204.182.161.2:1431 207.245.212.237:27500 in via fxp0 Fragment = 185
Mar 17 00:37:43 iolite /kernel: ipfw: 5000 Deny UDP 194.217.251.40:31281 207.245.212.237:27500 in via fxp0 Fragment = 185

The purpose is to protect some of my customers' pipelines

	---Mike


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message