Date: Thu, 5 Dec 2002 08:49:05 +1100 From: "Rob B" <rbyrnes@ozemail.com.au> To: "freebsd-stable" <freebsd-stable@freebsd.org> Cc: "freebsd-alpha" <freebsd-alpha@freebsd.org> Subject: ipfw troubles Message-ID: <001201c29c53$32067da0$3164a8c0@pootah>
next in thread | raw e-mail | index | archive | help
Recently compiled a new kernel for my Multia to do some firewalling. Now, when trying to show the current rules, I get this: [root@doormat]/root: ipfw list 00000 ip from any to any [opcode 0 len 0] [opcode 0 len 0] [opcode 0 len 0] [opcode 0 len 0] [opcode 0 len 0] [opcode 0 len 0] [opcode 0 len 0] [opcode 0 len 0] [opcode 0 len 0] [opcode 0 len 0] [opcode 0 len 0] [opcode 0 len 0] [opcode 0 len 0] [opcode 0 len 0] [opcode 0 len 0] [opcode 0 ^C Relevant kernel options are as follows: options ICMP_BANDLIM #Rate limit bad replies options RANDOM_IP_ID #See ../../i386/conf/LINT options IPFIREWALL #firewall options IPFIREWALL_VERBOSE #enable logging to syslogd(8) options IPFIREWALL_FORWARD #enable transparent proxy support options IPFIREWALL_VERBOSE_LIMIT=500 #limit verbosity options IPDIVERT #Divert sockets options DUMMYNET #Bandwidth limiter options HZ=200 /etc/rc.conf has firewall_enable="YES" firewall_type=OPEN I'm currently only able to access the box from serial console, and /var/log/ipfw.today shows: 00300 0 0 deny ip from 127.0.0.0:255.0.0.0 to anymber6.loop.bpa.nu 65535 0 0 deny ip from any to any Any thoughts? cheers, Rob -- "Teaching should be such that what is offered is perceived as a valuable gift and not as a hard duty." - Albert Einstein This is quote 76 of 1254. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-stable" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?001201c29c53$32067da0$3164a8c0>