From owner-freebsd-ipfw@freebsd.org Tue Dec 11 17:22:37 2018 Return-Path: Delivered-To: freebsd-ipfw@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 52DD8130B564 for ; Tue, 11 Dec 2018 17:22:37 +0000 (UTC) (envelope-from cei@yourshop.com) Received: from gamma.yourshop.com (gamma.yourshop.com [212.74.185.45]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 6D90781DDC for ; Tue, 11 Dec 2018 17:22:36 +0000 (UTC) (envelope-from cei@yourshop.com) Received: from yourshop.com (localhost [127.0.0.1]) by gamma.yourshop.com (8.15.2/8.15.2) with ESMTP id wBBHMYAu013731; Tue, 11 Dec 2018 18:22:34 +0100 (CET) (envelope-from cei@yourshop.com) Received: (from cei@localhost) by yourshop.com (8.15.2/8.15.2/Submit) id wBBHMY4W013730; Tue, 11 Dec 2018 18:22:34 +0100 (CET) (envelope-from cei) Date: Tue, 11 Dec 2018 18:22:34 +0100 From: Claudio Eichenberger To: "Andrey V. Elsukov" Cc: freebsd-ipfw@freebsd.org Subject: Re: ipfw -N show Message-ID: <20181211172234.GA13642@yourshop.com> References: <20181210142701.GA12120@yourshop.com> <828f1634-9e9e-a6ef-4d7d-abcf071d89a7@yandex.ru> <20181211130145.GC4820@yourshop.com> <396f3a36-9108-1a97-76de-7de6931fb984@yandex.ru> <20181211165534.GA13363@yourshop.com> <98bd2566-fefc-15fd-d1f4-7719c273fa44@yandex.ru> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Disposition: inline In-Reply-To: <98bd2566-fefc-15fd-d1f4-7719c273fa44@yandex.ru> X-Rspamd-Queue-Id: 6D90781DDC X-Spamd-Bar: / Authentication-Results: mx1.freebsd.org; spf=pass (mx1.freebsd.org: domain of cei@yourshop.com designates 212.74.185.45 as permitted sender) smtp.mailfrom=cei@yourshop.com X-Spamd-Result: default: False [-0.78 / 15.00]; ARC_NA(0.00)[]; FROM_HAS_DN(0.00)[]; TO_DN_SOME(0.00)[]; R_SPF_ALLOW(-0.20)[+ip4:212.74.185.45]; MIME_GOOD(-0.10)[text/plain]; RCVD_TLS_LAST(0.00)[]; DMARC_NA(0.00)[yourshop.com]; RCVD_COUNT_THREE(0.00)[3]; TO_MATCH_ENVRCPT_SOME(0.00)[]; MX_GOOD(-0.01)[cached: mail.yourshop.com]; RCPT_COUNT_TWO(0.00)[2]; NEURAL_HAM_SHORT(-0.46)[-0.461,0]; IP_SCORE(-0.00)[country: CH(-0.02)]; FREEMAIL_TO(0.00)[yandex.ru]; FROM_EQ_ENVFROM(0.00)[]; R_DKIM_NA(0.00)[]; MIME_TRACE(0.00)[0:+]; ASN(0.00)[asn:12651, ipnet:212.74.128.0/18, country:CH]; MID_RHS_MATCH_FROM(0.00)[] X-BeenThere: freebsd-ipfw@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: IPFW Technical Discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 11 Dec 2018 17:22:37 -0000 Hello Andrey, Many many thanks. This solved the problem. Your fix does more than did the -N flag in the past. Even the IP Address gets transformed to domain name! 00600 58 2404 allow tcp from any to yourshop.com http in recv bce0 00700 48 15788 allow tcp from yourshop.com http to any out xmit bce0 Claudio On 2018-12-11 19:56:46, Andrey V. Elsukov wrote: > On 11.12.2018 19:55, Claudio Eichenberger wrote: > > I didn't install anything. I applied the patches to this file > > /usr/src/sbin/ipfw/ipfw2.c compiled the kernel & booted > > These patches are not for kernel, you need to rebuild only sbin/ipfw > utility. > You can do this: > > # make -C /usr/src/sbin/ipfw all install > > -- > WBR, Andrey V. Elsukov > -- Tel +41 21 67 17 111 mailto:cei@yourshop.com https://YourShop.com "But Israel will be saved by the LORD with an everlasting salvation; you will never be put to shame or disgraced, to ages everlasting." -- Isaiah 45:17 https://www.youtube.com/DannyAyalon