Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 4 Oct 2001 07:39:52 +0530
From:      "Arpith Jacob" <arpith@geocities.com>
To:        <freebsd-questions@FreeBSD.ORG>
Subject:   Firewall troubles
Message-ID:  <OE32d490U3s91NGXpxw00003bd4@hotmail.com>

next in thread | raw e-mail | index | archive | help

Hi,

I'm having problems connecting to my freebsd box from my network, I've tried
nearly everything without any success. I think its a problem with my
firewall rules.

I cannot ping/telnet/ftp into my freebsd machine. I can however connect to
the outside world from the bsd box. How can I remove the default "deny"
clause for the firewall in my kernel options?

Here is my firewall table (ipfw):
00100  52  3640 allow ip from any to any via lo0
00200   0     0 deny ip from any to 127.0.0.0/8
65000 156 10249 allow ip from any to any
65535   0     0 deny ip from any to any

I ran tcpdump on the freebsd machine, I think the kernel is receiving the
connection requests, but is not passing it through the firewall.

Outside network = p3.scully
Freebsd mc = p1.scully

13:44:35.504743 p3.scully > p1.scully: icmp: echo request (DF)
..
..
13:45:03.509338 p3.scully > p1.scully: icmp: echo request (DF)
13:45:04.509438 arp who-has p1.scully tell p3.scully
13:45:04.509523 p3.scully > p1.scully: icmp: echo request (DF)
13:45:04.509645 arp reply p1.scully is-at a5:a5:a5:a5:a5:a5
13:45:05.509668 p3.scully > p1.scully: icmp: echo request (DF)
..
..
13:45:31.513951 p3.scully > p1.scully: icmp: echo request (DF)
..
13:45:33.569860 p3.scully.1040 > p1.scully.telnet: S
4274696198:4274696198(0) win 5840 <mss 1460,sackOK,timestamp 234528
0,nop,wscale 0> (DF)
13:45:34.514374 arp who-has p1.scully tell p3.scully
13:45:34.514498 arp reply p1.scully is-at a5:a5:a5:a5:a5:a5
13:45:36.564739 p3.scully.1040 > p1.scully.telnet: S
4274696198:4274696198(0) win 5840 <mss 1460,sackOK,timestamp 234828
0,nop,wscale 0> (DF)

I've been breaking my head over this for a while now.. any help would really
be appreciated.

Thanks,
Arpith


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?OE32d490U3s91NGXpxw00003bd4>