Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 26 Sep 2007 13:31:22 -0700
From:      Chuck Swiger <cswiger@mac.com>
To:        Chris Yocum <cyocum@gmail.com>
Cc:        freebsd-questions@freebsd.org
Subject:   Re: Dumb IPFW Question
Message-ID:  <922E2649-FBD9-4D92-8F87-84158B4537BD@mac.com>
In-Reply-To: <82bb54530709261246p203f751fk2df592d30b003b89@mail.gmail.com>
References:  <82bb54530709261246p203f751fk2df592d30b003b89@mail.gmail.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On Sep 26, 2007, at 12:46 PM, Chris Yocum wrote:
[ ... ]
>  I also get "Sep 26 20:09:17 routy kernel: ipfw: 450 Deny UDP <my
> router outside IP>:53 <my isp dns ip>:53 out via sis0" in my
> /var/log/security file.  I have appended the ipfw rules below so you
> can see all the changes that I made from the original.

The setup keyword should only be used with TCP packets; trying to use  
it with UDP traffic will cause your pass-through rules (#23-25) to  
not match the traffic you want them to match...

-- 
-Chuck




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?922E2649-FBD9-4D92-8F87-84158B4537BD>