Date: Fri, 02 Nov 2007 14:43:23 -0500 From: Jack Barnett <jackbarnett@gmail.com> To: Bob Hall <rjhjr@cox.net>, Jack Barnett <jackbarnett@gmail.com>, Freebsd questions <freebsd-questions@freebsd.org> Subject: Re: IPFW Rules and Games Message-ID: <472B7DDB.7040606@gmail.com> In-Reply-To: <20071102191207.GA79177@kongemord.krig.net> References: <472AF4FF.9000803@gmail.com> <20071102191207.GA79177@kongemord.krig.net>
next in thread | previous in thread | raw e-mail | index | archive | help
Bob Hall wrote:
On Fri, Nov 02, 2007 at 04:59:27AM -0500, Jack Barnett wrote:
I added this for a temporary fix:
${fwcmd} add pass all from any to any
I don't think that is the right answer; That allows to much in?
Yes.
I've tried these per the docs:
${fwcmd} add allow all from any to any out via {$iip} setup
${fwcmd} add allow all from any to any out via {$iip} established
${fwcmd} add allow all from any to any in via {$iip} established
and also a bunch of others; but none of them worked.
Try oip instead of iip. iip is your internal IP address, so anything
going out from iip is going to your lan, and anything coming in to iip
is coming from your lan. You want to control packets communicating with
the outside world, so you want to control them at oip.
Sorry, that didn't work.
I also tried this:
${fwcmd} add allow tcp from any to any via ${oip} setup
${fwcmd} add allow udp from any to any via ${oip} setup
${fwcmd} add allow tcp from any to any via ${oip} established
${fwcmd} add allow udp from any to any via ${oip} established
That also blocks it. :(
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?472B7DDB.7040606>