From owner-freebsd-current@FreeBSD.ORG  Sat Dec  6 05:47:23 2003
Return-Path: <owner-freebsd-current@FreeBSD.ORG>
Delivered-To: freebsd-current@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id C639E16A4CE
	for <current@freebsd.org>; Sat,  6 Dec 2003 05:47:23 -0800 (PST)
Received: from elvis.mu.org (elvis.mu.org [192.203.228.196])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 1D35A43FE3
	for <current@freebsd.org>; Sat,  6 Dec 2003 05:47:23 -0800 (PST)
	(envelope-from bright@elvis.mu.org)
Received: by elvis.mu.org (Postfix, from userid 1192)
	id 10DC22ED44E; Sat,  6 Dec 2003 05:47:23 -0800 (PST)
Date: Sat, 6 Dec 2003 05:47:23 -0800
From: Alfred Perlstein <bright@mu.org>
To: current@freebsd.org
Message-ID: <20031206134723.GH75620@elvis.mu.org>
References: <20031206134303.GG75620@elvis.mu.org>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <20031206134303.GG75620@elvis.mu.org>
User-Agent: Mutt/1.4.1i
Subject: Re: ipfw breakage in 5.2
X-BeenThere: freebsd-current@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Discussions about the use of FreeBSD-current
	<freebsd-current.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-current>,
	<mailto:freebsd-current-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-current>
List-Post: <mailto:freebsd-current@freebsd.org>
List-Help: <mailto:freebsd-current-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-current>,
	<mailto:freebsd-current-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sat, 06 Dec 2003 13:47:23 -0000

Ok, nevermind, I don't see how 'lo' got used instead of 'lo0'
but that's what appears to have caused it.

* Alfred Perlstein <bright@mu.org> [031206 05:43] wrote:
> Sorry if this is a false alarm, but with the "open" firewall
> ruleset in effect:
> 
> # ipfw l
> 00100 allow ip from any to any via lo
> 00200 deny ip from any to 127.0.0.0/8
> 00300 deny ip from 127.0.0.0/8 to any
> 65000 allow ip from any to any
> 65535 allow ip from any to any
> 
> I can't ping my loopback:
> 
> # ping localhost
> PING localhost (127.0.0.1): 56 data bytes
> ping: sendto: Permission denied
> 
> is this known/expected?
> 
> 
> -- 
> - Alfred Perlstein
> - Research Engineering Development Inc.
> - email: bright@mu.org cell: 408-480-4684

-- 
- Alfred Perlstein
- Research Engineering Development Inc.
- email: bright@mu.org cell: 408-480-4684