Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 3 Jan 2005 19:29:24 +0100
From:      "Gerard Meijer" <gmeijer@palmweb.nl>
To:        <freebsd-questions@freebsd.org>
Subject:   ipfw question (FreeBSD 4.11)
Message-ID:  <068101c4f1c2$26f11620$9600000a@guus>

next in thread | raw e-mail | index | archive | help
I run apache webserver on my server with FreeBSD 4.11

I have a question about ipfw. I have the following rules in my =
/etc/ipfw.conf:

$cmd 00200 allow tcp from any to any 80 out via $pif setup keep-state
$cmd 00400 allow tcp from any to any 80 in via $pif setup keep-state

(with $pif being my NIC) Now, everything works fine for me, but I get a =
lot (and I mean a lot) of these kind of messages in my log:

[Date] [time] [host] /kernel: ipfw: 299 Deny TCP a.b.c.d:80 e.f.g.h:4472 =
out via em0
[Date] [time] [host] /kernel: ipfw: 499 Deny TCP e.f.g.h:1882 a.b.c.d:80 =
in via em0

(with a.b.c.d being my ip and e.f.g.h being somebody elses ip).

I guess these people are not surfing through port 80??? Correct me if =
I'm wrong. How can I change ipfw's rules so that these people aren't =
blocked anymore?

Thanks in advance!



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?068101c4f1c2$26f11620$9600000a>