From owner-freebsd-questions  Mon Sep 22 14:45:59 1997
Return-Path: <owner-freebsd-questions>
Received: (from root@localhost)
          by hub.freebsd.org (8.8.7/8.8.7) id OAA23314
          for questions-outgoing; Mon, 22 Sep 1997 14:45:59 -0700 (PDT)
Received: from bitbox.follo.net (bitbox.follo.net [194.198.43.36])
          by hub.freebsd.org (8.8.7/8.8.7) with ESMTP id OAA23300
          for <freebsd-questions@FreeBSD.ORG>; Mon, 22 Sep 1997 14:45:47 -0700 (PDT)
Received: (from eivind@localhost)
	by bitbox.follo.net (8.8.6/8.8.6) id XAA09608;
	Mon, 22 Sep 1997 23:44:29 +0200 (MET DST)
Date: Mon, 22 Sep 1997 23:44:29 +0200 (MET DST)
Message-Id: <199709222144.XAA09608@bitbox.follo.net>
From: Eivind Eklund <perhaps@yes.no>
To: Alexandre Stumpf <stumpf@server.interage.com.br>
CC: freebsd-questions@FreeBSD.ORG
In-reply-to: Alexandre Stumpf's message of Mon, 22 Sep 1997 17:11:58 -0300
	(EST)
Subject: Re: IPFW Problem
References: <199709222011.RAA01150@server.interage.com.br>
Sender: owner-freebsd-questions@FreeBSD.ORG
X-Loop: FreeBSD.org
Precedence: bulk

> 
> Hi,
> 	I'm using a freebsd 3.0 SNAP as a firewall to a network. In my local
> network I have a NT4.0 with PPTP. I want to permit my remote clients to
> connect to my PPTP server vi Internet. My problem is : Hown can I enable
> PPTP traffic throght my firewall, if PPTP is a protocol (47) over IP ?
> I don't want to allow all IP to my PPTP server.

'man ipfw' will tell you.

ipfw allow tcp from any to ${NTIP}:47

should do the trick if I remember the syntax, but you use the same
time as me for looking up the syntax.

Eivind.