Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 2 Jul 2001 17:57:22 -0500
From:      "denny white" <dennywhite@yahoo.com>
To:        <questions@freebsd.org>
Subject:   ipfw & pccard problems
Message-ID:  <000b01c1034a$7101ef60$6601a8c0@hal>

next in thread | raw e-mail | index | archive | help
In the ruleset at the bottom, putting in 00301 thru 00401, I was able
to ping ip's but had no dns resolution, so lines 000301 thru 00401
were added. Now, when the ruleset loads, ipfw warns that interface
ed1 does not exist, yet immediately afterward, that's where dmesg
lists it as being at ed1. The card is a Linksys Fast Ethernet 10/100
pc card, running on my laptop, a Toshiba PII 266 Satellite. Am new
to this & was wondering if it's the load order that's causing it. That is,
the ruleset being loaded before the card. If it is the problem, is there
a way to reverse the load order? I thought that maybe I had to create
the device, but it's always ran before now, & then I read that that's one
device you don't make, that it's controlled from the kernel. For info sake,
the only thing I've changed in my kernel is compiling sound & firewall
support in, & afterward, running the standard "open" firewall, set in
/etc/rc.conf, the pc card continued to work until I tried to use the new
ruleset below. Before trying firewalls, I did one cvsup to learn how &
got everything built & running okay, & then too, the pc card was working.

Here's the ruleset I'm trying to use:

00100 0 0 allow ip from any to any via lo0
00200 0 0 deny ip from any to 127.0.0.0/8
00300 0 0 check-state
00301 0 0 deny tcp from any to any in established
00302 0 0 allow tcp from any to any keep-state setup
00400 0 0 allow udp from 24.116.0.81 53 to any in recv ed1
00401 0 0 allow udp from 24.226.0.201 53 to any in recv ed1
65535 30 2196 deny ip from any to any

Thanks for all help I can get on  this.


_________________________________________________________
Do You Yahoo!?
Get your free @yahoo.com address at http://mail.yahoo.com


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?000b01c1034a$7101ef60$6601a8c0>