Date: Fri, 1 Mar 2002 14:59:50 +0100 From: Bart Matthaei <bart@dreamflow.nl> To: George.Giles@mcmail.vanderbilt.edu Cc: security@freebsd.org Subject: Re: ipfw and DHCP Message-ID: <20020301145949.D50583@heresy.dreamflow.nl> In-Reply-To: <OF25945D77.FFDCD63C-ON86256B6F.004C1698@MC.VANDERBILT.EDU>; from George.Giles@mcmail.vanderbilt.edu on Fri, Mar 01, 2002 at 07:52:26AM -0600 References: <OF25945D77.FFDCD63C-ON86256B6F.004C1698@MC.VANDERBILT.EDU>
next in thread | previous in thread | raw e-mail | index | archive | help
--zYM0uCDKw75PZbzx Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Fri, Mar 01, 2002 at 07:52:26AM -0600, George.Giles@mcmail.vanderbilt.ed= u wrote: > How do you get ipfw to pick-up DHCP value for oif in the rc.firewall scri= pt > ? There are some ways (scripting) to pass the ip from dhclient to rc.firewall. But in a DHCP setup, I would advice you to use interfaces in your firewall, instead of IPs. Example: ipfw add deny tcp from any to any 22 recv $external_interface instead of=20 ipfw add deny tcp from any to $dhcp_ip 22 HTH. Regards, Bart --=20 Bart Matthaei bart@dreamflow.nl=20 Kiss me twice. I'm schizophrenic. --zYM0uCDKw75PZbzx Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.6 (FreeBSD) Comment: For info see http://www.gnupg.org iD8DBQE8f4lVgcc6pR+tCegRAuVtAKDDNzRrCAAf0+WKA+eOMiPxwIwvWACeN7b8 9Nu8BmndcZavGvyM7HEWKfM= =0kYX -----END PGP SIGNATURE----- --zYM0uCDKw75PZbzx-- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20020301145949.D50583>