Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 17 Apr 2002 20:53:51 +0200
From:      "Richard Kaestner" <richard.kaestner@ycn.com>
To:        <questions@FreeBSD.ORG>
Subject:   ipfw - please help understanding
Message-ID:  <C1F8152FC5A1D31196510000B430148603105D@saturn>

next in thread | raw e-mail | index | archive | help
could someone please help me to understand:
(before I go deeper and finally create my firewall,
I want to understand ...)

I want to setup a rule for 10.1.1.1/16:

simple case:
	- 10.1.1.1/16 -> should be alowed to "ssh" to "everyone in 10.1.x.x/16
	- only 10.1.1.2/16 should be allowed to "ssh" to 10.1.1.1/16

	I think, this rule could work (on 10.1.1.1):
	allow log tcp from 10.1.1.2/16 22 to me keep-state in
      	                                  ^^^^^^^ => setup ?

	(at least, I tried it and I could do what I wanted - however, I am
	almost sure, it is not the full thing ...)

	Which place for such rule would be adequate, if there also should
	be rules for other protocols ( as http, smtp) - is there some advise
	about "priorities" of rules?

Is there kind of "intro for (ip) dummies" to ipfw rules?
(I can't get clear with the short description in the handbook)

Is there kind of "starters ruleset" for a simple firewall
(possibly with some explanations ...)


Thanks for every help!

--
  ciao -
    Richard

"you have moved your mouse, please reboot to make this change take
effect"

Richard Kästner
Woerthgasse 17
2500 Baden                              Austria
mailto:richard.kaestner@ycn.com


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?C1F8152FC5A1D31196510000B430148603105D>