Date: Sun, 15 Dec 2002 10:52:46 -0800 From: Gary D Kline <kline@thought.org> To: FreeBSD Mailing List <freebsd-questions@FreeBSD.ORG> Subject: translation to ipfw? Message-ID: <20021215185246.GA18501@tao.thought.org>
next in thread | raw e-mail | index | archive | help
Hi Folks, Can anybody translate the following ipf rules to ipfw for me? Given a few examples as a template, I should be able to handle the rest myself. According to some -security postings from 2000, the thought was that ipf was superior.... is this still the case? thanks in advance, gary pass out quick on dc0 proto tcp from any to any keep state pass out quick on dc0 proto udp from any to any keep state pass out quick on dc0 proto icmp from any to any keep state block out quick on dc0 all # use next line if ISP uses DHCP # pass in quick on dc0 proto udp from X.X.X.X/32 to any port = 68 keep state # Let in SSH on port 22 pass in quick on dc0 proto tcp from any to 216.231.43.140/32 port = 22 keep state pass in quick on dc0 proto udp from any to 216.231.43.140/32 port = 22 keep state . . . # Let in FTP data connections pass in quick on dc0 proto tcp from any to any port 7499 >< 8501 pass in quick on dc0 proto tcp from any to any port = 21 # Let pings return pass in quick on dc0 proto icmp from any to 216.231.43.140/32 icmp-type echo -- Gary Kline kline@thought.org www.thought.org Public service Unix To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20021215185246.GA18501>