From owner-freebsd-questions Thu Mar 20 11:56:40 2003 Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 8FBCA37B401 for ; Thu, 20 Mar 2003 11:56:38 -0800 (PST) Received: from ashram.rhavenn.net (ashram.rhavenn.net [209.150.195.50]) by mx1.FreeBSD.org (Postfix) with ESMTP id 00A6843F75 for ; Thu, 20 Mar 2003 11:56:38 -0800 (PST) (envelope-from lists@rhavenn.net) Received: from 10.0.0.40 (nordmarkagroupltd-psr1047844.z92-89-67.customer.algx.net [67.89.92.230]) by ashram.rhavenn.net (Postfix) with ESMTP id CDFE42A831; Thu, 20 Mar 2003 14:09:55 -0600 (CST) From: Henrik Hudson To: "W. J. Williams" , freebsd-questions@freebsd.org Subject: Re: IPFW firewall rules not complete Date: Thu, 20 Mar 2003 13:56:23 -0600 User-Agent: KMail/1.5 References: <20030320194544.26310.qmail@web13505.mail.yahoo.com> In-Reply-To: <20030320194544.26310.qmail@web13505.mail.yahoo.com> MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Content-Disposition: inline Message-Id: <200303201356.23830.lists@rhavenn.net> Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG > I am experimenting with IPFW firewalls and have hit a roadblock. I am > trying to allow ssh, mail, dns requests, pings and traceroutes out, but > not in and webmin (port 10000). I am hitting a roadblock on mail and > pings out. Hope someone can help me...I am new to this and don=B4t > understand firewall rules syntax fully. I have funded my own lab to > experiment with this fun and powerful stuff... > Did you setup NAT and IPDIVERT in your kernel? http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/natd.html Even though you have 2 private networks, you still need to run NAT accross= =20 those subnets or add static routes to your DSL modem, otherwise any traffic= =20 coming back in from the DSL modem won't know where to go to find the fxp1=20 network. Check out the handbook, it should work for you. =2D-=20 Henrik Hudson lists@rhavenn.net You know, Hobbes, some days even my lucky rocket ship underpants don't help." Calvin To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message