Date: Mon, 15 Nov 2004 15:21:47 -0500 From: "Andrew Smith" <andsmith@andsmith.com> To: <freebsd-questions@freebsd.org> Subject: ipf firewall questions Message-ID: <001e01c4cb50$be9933b0$19c8a8c0@loriandsmith>
next in thread | raw e-mail | index | archive | help
I'm using ipf as my firewall, and I can't figure out why OWA is being = blocked going to 172.20.0.11. Below is the current config file which = works. But if I removed the fourth line, my users can't access OWA = externally. I would have thought the lines: pass out quick from = 172.20.0.0/24 to any keep state and pass in quick from any to = 172.20.0.0/24 would have superceded the line block out log proto tcp = from any to any port =3D 80. Any suggestions would be helpful. Andrew -------------------------------------------------------------------- # # Permit Outlook Web Access # pass in quick proto tcp from any to 172.20.0.11 port =3D 80 keep state=20 # # Allow All College Traffic # pass in quick from 10.0.0.0/8 to any pass out quick from any to 10.0.0.0/8 # # Permit all Network Critical Machines Access # pass out quick from 172.20.0.0/24 to any keep state pass in quick from any to 172.20.0.0/24 # # Permit all Network Teacher/Staff Computers Access # pass out quick from 172.20.1.0/24 to any keep state pass in quick from any to 172.20.1.0/24 # # Block all Network Traffic from Student Used Computers # block out quick from 172.20.2.0/24 to any block in quick from any to 172.20.2.0/24 # # Block all Network Traffic from Student Owned Computers # block out quick from 172.20.3.0/24 to any block in quick from any to 172.20.3.0/24 # # Block any other Port 80 or 443 Access # block out log proto tcp from any to any port =3D 80 block out log proto tcp from any to any port =3D 443
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?001e01c4cb50$be9933b0$19c8a8c0>