Skip site navigation (1)Skip section navigation (2)
Date:      12 Apr 2001 17:03:12 -0500
From:      Kirk Strauser <kirk@strauser.com>
To:        freebsd-ipfw@freebsd.org
Subject:   Using recv and xmit together?
Message-ID:  <8766g9hj33.fsf@pooh.honeypot>

Next in thread | Raw E-Mail | Index | Archive | Help
I want to allow connections from internal clients to external servers.  I
had originally thought that:

  ipfw add allow tcp from <client> to <server> <port> \
     keep-state out recv <int1> xmit <int2>

or some close variation would work.  Instead, I'm finding that I seem to
need to split this into two rules:

  ipfw add allow tcp from <client> to <server> <port> \
     keep-state in recv <int1>
  ipfw add allow tcp from <client> to <server> <port> \
     keep-state out xmit <int2>

Is this correct?  I really hope that I'm misreading the situation (you can
only look at firewall rules for so many hours before things get fuzzy).
-- 
Kirk Strauser

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-ipfw" in the body of the message




Want to link to this message? Use this URL: <http://docs.FreeBSD.org/cgi/mid.cgi?8766g9hj33.fsf>