Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 21 Mar 2002 01:59:37 -0800 (PST)
From:      agusri dodi <dodix2000@yahoo.com>
To:        SimsS@IBM.net
Cc:        questions@FreeBSD.org
Subject:   Firewall Rule for IRC 
Message-ID:  <20020321095937.37447.qmail@web20605.mail.yahoo.com>

next in thread | raw e-mail | index | archive | help
I am using Natd to connect my LAN to Internet.Web and
FTP work well but my client can not use IRC services

here is the content of my configuration file

RC.CONF  :
gateway_enable="YES"
natd_enable="YES"
natd_interface="fxp0"

natd_flags="-f /etc/natd.conf"


firewall_enable="NO"


THE CONTENT OF RC.lOCAL FILE   :

echo 'Starting Firewall'
/sbin/ipfw -f flush
/sbin/ipfw add divert natd all from any to any via
fxp0

# My Local Network (my netwrok interface (INTEL)
/sbin/ipfw add allow  ip from
192.168.0.0:255.255.255.0 to any via fxp0

#Allow INDENT
/sbin/ipfw add allow log  tcp from any to any  194 in
recv fxp0 setup

#Allow IRC
/sbin/ipfw add allow log  tcp from any to any  113 in
recv fxp0 setup


#Deny X
/sbin/ipfw add 00300 deny log tcp from any to any 6000
in recv fxp0

#  DNS of  my ISP
/sbin/ipfw add allow  tcp from 202.134.0.155 to any 
in recv fxp0 
/sbin/ipfw add allow  tcp from 202.134.2.5 to any  in
recv fxp0 

/sbin/ipfw add allow  udp from 202.134.0.155 to any 
in recv fxp0 
/sbin/ipfw add allow  udp from 202.134.2.5 to any  in
recv fxp0 


/sbin/ipfw add pass all from any to any


echo 'Starting Natd '
natd -n fxp0  -f /etc/natd.conf


echo 'Starting Boa '
boa


THE CONTENT OF NATD.CONF FILE :
interface fxp0
use_sockets yes
same_ports yes

What should I do ?
Is there any setting for IRC client ?

thank for reply

__________________________________________________
Do You Yahoo!?
Yahoo! Movies - coverage of the 74th Academy Awards®
http://movies.yahoo.com/

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20020321095937.37447.qmail>