Date: Sun, 20 Aug 2000 12:57:59 -0700 From: Dan Debertin <airboss@bitstream.net> To: Todd Backman <todd@flyingcroc.net> Cc: freebsd-net@freebsd.org Subject: Re: Routing firewall w/ipfw questions Message-ID: <Pine.SGI.4.21.0008201249430.11560-100000@copper.air-boss.net> In-Reply-To: <Pine.BSF.4.21.0008192313240.27785-100000@security1.noc.flyingcroc.net>
next in thread | previous in thread | raw e-mail | index | archive | help
On Sat, 19 Aug 2000, Todd Backman wrote: > established connection) but no access from the outside could be > established even after adding as the last rulesets: > > allow ip from any to any If you are inserting this rule onto the end of your ruleset, you're still going through all of your other rules before getting to this one. Given that we're just trying to get the routing working, you're better off turning off firewalling completely with: sysctl -w net.inet.ip.fw.enable=0 Once we get routing working from inside out, and from outside in, we can throw ipfw back into the mix. If that doesn't work, perhaps an ASCII drawing of your network, with the relevant addresses (converted into made-up ones, of course), etc., would be helpful. ~Dan D. -- ++ Dan Debertin ++ Senior Systems Administrator ++ Bitstream Underground, LLC ++ airboss@bitstream.net ++ (612)321-9290 To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-net" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.SGI.4.21.0008201249430.11560-100000>