From owner-freebsd-security Mon Jul 24 20:32:45 2000 Delivered-To: freebsd-security@freebsd.org Received: from mail.rdc1.il.home.com (ha1.rdc1.il.home.com [24.2.1.66]) by hub.freebsd.org (Postfix) with ESMTP id A990F37B9A5 for ; Mon, 24 Jul 2000 20:32:39 -0700 (PDT) (envelope-from stephen@math.missouri.edu) Received: from math.missouri.edu ([24.12.197.197]) by mail.rdc1.il.home.com (InterMail vM.4.01.03.00 201-229-121) with ESMTP id <20000725033238.YQDZ11071.mail.rdc1.il.home.com@math.missouri.edu>; Mon, 24 Jul 2000 20:32:38 -0700 Message-ID: <397D0A56.E695E55C@math.missouri.edu> Date: Mon, 24 Jul 2000 22:32:38 -0500 From: Stephen Montgomery-Smith X-Mailer: Mozilla 4.72 [en] (X11; I; Linux 2.2.14 i686) X-Accept-Language: en MIME-Version: 1.0 To: Mike Hoskins Cc: freebsd-security@freebsd.org Subject: Re: Problems with natd and simple firewall References: Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Mike Hoskins wrote: > > As for a dynamic rule... I have the following setup: > > divert 8668 ip from any to any via oif > allow ip from any to any via lo0 > deny ip from any to 127.0.0.0/8 > # specific deny/logs to monitor port scans/etc > check-state > allow ip from oip to any keep-state > allow ip from inw to any keep-state > # specific allows i want > deny ip from any to any > I read the ipfw man page, and it is so terse on this subject that I cannot understand it. Like many man pages, it gives a lot of details, but does not provide the overall picture. If anyone could tell me the overall picture of what dynamic rules are about - give me a start and a context so that the man page makes sense, I would really appreciate it. -- Stephen Montgomery-Smith Department of Mathematics, University of Missouri, Columbia, MO 65211 Phone 573-882-4540, fax 573-882-1869 http://www.math.missouri.edu/~stephen stephen@math.missouri.edu To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message