From owner-freebsd-questions  Mon Mar 11  7:28:17 2002
Delivered-To: freebsd-questions@freebsd.org
Received: from sage-one.net (adsl-208-191-226-68.dsl.crchtx.swbell.net [208.191.226.68])
	by hub.freebsd.org (Postfix) with ESMTP id 3324937B419
	for <questions@FreeBSD.ORG>; Mon, 11 Mar 2002 07:28:13 -0800 (PST)
Received: from SAGEONE (sageone [192.168.0.5])
	by sage-one.net (8.11.6/8.11.6) with SMTP id g2BFS9H14761;
	Mon, 11 Mar 2002 09:28:10 -0600 (CST)
	(envelope-from admin@sage-one.net)
Message-Id: <3.0.5.32.20020311092808.01130098@mail.sage-one.net>
X-Sender: admin@mail.sage-one.net
X-Mailer: QUALCOMM Windows Eudora Pro Version 3.0.5 (32)
Date: Mon, 11 Mar 2002 09:28:08 -0600
To: =?iso-8859-1?Q?=22Peter_Lepp=E4nen=22?= <pele02@handelsbanken.se>,
	questions@FreeBSD.ORG
From: Server Admin <admin@sage-one.net>
Subject: Re: IPFW question!
In-Reply-To: <OFE0264F92.8C3E7852-ONC1256B79.00463F0A@sth.shb.se>
Mime-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-questions.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-questions>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-questions>
X-Loop: FreeBSD.ORG

Peter, you will need to modify that very sparse basic script to allow any
additional services you want, like port 80 for http Internet services....

At 02:24 PM 3.11.2002 +0100, Peter Lepp=E4nen wrote:
>Hello!
>
>Installed a box with 4.5-release on it. Added IPFW and rebuilt the kernel.
>Then I enabled NAT and IPFIREWALL  in rc.conf (and disabled some other
stuff).
>For start I changed the ipfirewall_type to "OPEN" to check that NAT worked.
>And so it did...up to this point everything worked great.
>But when I changed the ipfirewall_type to "SIMPLE" I could no longer get
>out on the Internet =3D(. The simple type should give me access to do at
least DNS
>queries and run HTTP. It says so in the rc.firewall file anyway.
>The only modification that I have made to the rc.firewall file is adding my
>ip, net and mask of my two NICs.
>
>Is this a known problem or what? Can=B4t find anything about it.
>
>Can somebody help me before I loose my mind! =3D)
>
>Regards!
>
>Peter
>
>
>
>To Unsubscribe: send mail to majordomo@FreeBSD.org
>with "unsubscribe freebsd-questions" in the body of the message
>
>
.... our website: http://www.sage-one.net/

Best regards,

Jack L. Stone
Server Admin

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message