Skip site navigation (1)Skip section navigation (2)
Date:      13 Aug 2003 21:12:46 -0400
From:      Lowell Gilbert <freebsd-questions-local@be-well.no-ip.com>
To:        darryl@osborne-ind.com
Cc:        freebsd-questions@freebsd.org
Subject:   Re: Blocking RIP requests on firewall
Message-ID:  <44r83p59f5.fsf@be-well.ilk.org>
In-Reply-To: <004701c361c8$354a96a0$0701a8c0@darryl>
References:  <004701c361c8$354a96a0$0701a8c0@darryl>

next in thread | previous in thread | raw e-mail | index | archive | help
...top-post ,please don't

"Darryl Hoar" <darryl@osborne-ind.com> writes:

> Yes,
> 10.0.0.1 is the SMC ADSL modem (external).
> It is running DHCP and assigns the ip
> to my firewall.
> 
> -ISP's DSL Line - ADSL Modem - Firewall - LAN

Then the packets *aren't* being sourced from 10.0.0.1; that's just the
last router that passed them along.  I think you want to say "any"
instead of that IP address.

> -Darryl
> 
> >-----Original Message-----
> >From: lowell@be-well.no-ip.com [mailto:lowell@be-well.no-ip.com]On
> >Behalf Of Lowell Gilbert
> >Sent: Wednesday, August 13, 2003 12:51 PM
> >To: darryl@osborne-ind.com
> >Cc: freebsd-questions@freebsd.org
> >Subject: Re: Blocking RIP requests on firewall
> >
> >
> >"Darryl Hoar" <darryl@osborne-ind.com> writes:
> >
> >> Greetings,
> >> I have a FreeBSD 4.7S machine that is running
> >> IPFilter and is configured as a firewall.
> >> 
> >> My external interface is xl0.
> >> 
> >> I put block in quick on xl0 proto udp from 10.0.0.1 to any port = 520
> >
> >All of the packets are coming from 10.0.0.1?    



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?44r83p59f5.fsf>