Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 8 Jan 2005 16:29:53 +0100
From:      J65nko BSD <j65nko@gmail.com>
To:        V Foulk <kaosent@kewd.com>
Cc:        freebsd-questions@freebsd.org
Subject:   Re: IPFW and whois lookup
Message-ID:  <19861fba0501080729ccb39e6@mail.gmail.com>
In-Reply-To: <000901c4f52a$74466ae0$68bbbbc0@kewdaeahnhd04i>
References:  <20050107192851.GK3639@gentoo-npk.bmp.ub> <000901c4f52a$74466ae0$68bbbbc0@kewdaeahnhd04i>

next in thread | previous in thread | raw e-mail | index | archive | help
On Fri, 7 Jan 2005 19:33:32 -0700, V Foulk <kaosent@kewd.com> wrote:
[snip]
> 
> # ipfw list
> 65535 allow ip from any to any
> 
> I did have more elaborate rule sets that worked great, with the
> exception of the whois/hostname lookups.
>
> 

$ grep whois /etc/services
whois           43/tcp          nicname

In pf the following rule would allow whois requests, initiated by
clients behind the firewall

pass out quick on xl0 proto tcp from any to any port = whois flags
S/SA modulate state

>
[snip]
>



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?19861fba0501080729ccb39e6>