Date: Tue, 21 Jun 2005 21:36:14 -0700 (PDT) From: James <apach3s@yahoo.com> To: freebsd-ipfw@freebsd.org Subject: Deny action doest work on my fbsd box Message-ID: <20050622043614.31252.qmail@web51303.mail.yahoo.com>
next in thread | raw e-mail | index | archive | help
Hi! I used freebsd version 4.11 and Im new on ipfirewall (ipfw). I've been started reading ipfw this month and my mind getting something confused. I read handbook on IPFW and still Im dont understand, not a whole but I understand little. This is my network diagram: ---------- ISP > DSL Modem > DSL Router > (a)FBSD SERVER(b) > TWO-PC-CLIENTS ---------- My `FBSD SERVER` has two ethernet. (a)vr0 (192.168.0.2 | 255.255.255.0) and (b)rl0 (172.16.20.1 | 255.255.255.0).. My `TWO-PC-CLIENTS` have an IP Address of 172.16.20.11 and 172.16.20.12.. Now I had been successfully setup and configure NATD to share the Internet Connection sharing to the TWO-PC-CLIENTS that was I followed from http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/network-natd.html .. Now I want to test how ipfw works and if it is effectively work on my fbsd box to block such TWO-PC-CLIENTS from ssh, browsing, and etc.. But I was failed and it doesnt work to block the port 22, 80 and still the TWO-PC-CLIENTS can browse and SSH on my fbsd box. here is my rc.conf, natd.conf and rules.firewall file from http://www.rootshell.be/~jam3s/file.txt My question is, how can i block ports 22 and 80 so that the TWO-PC-CLIENTS and other I wanted to block/deny will work? I do reading rc.firewall and dont understand it very well :).. I hope anyone could help me... If you have a nice tutorial for the basic ipfw commands that much easy to understand, just tell me :).. thanks in advanced.. james ---------- JaMeS apach3s[at]yahoo[dot]com Call my name at your own risk! __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20050622043614.31252.qmail>