Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 6 Sep 1996 23:40:29 +0930 (CST)
From:      Peter Childs <pjchilds@imforei.apana.org.au>
To:        vam@recruiter.on.ca, freebsd-questions@freebsd.org
Subject:   Re: Firewall to keep out NetBIOS
Message-ID:  <199609061410.XAA10009@al.imforei.apana.org.au>

next in thread | raw e-mail | index | archive | help
In article <Pine.BSF.3.91.960905161025.4302B-100000@recruiter.on.ca> you wrote:

: I'm trying to set up freebsd as a firewall to keep people on the internet 
: from accessing MS-Windows shared directories.

[cut]

: I want to keep out TCP and UDP traffic from ports 137, 138 and 139, so I 
: started with something like this:

: /sbin/ipfw addf deny tcp from any to $1 137
: /sbin/ipfw addf deny tcp from $1 137 to any

[cut]

 I'd probably just block everything going in and out on 137->139
 on your slip link with something simple like...

 ipfw addf deny tcp from any to any 137:139 via sl0

 I'm not to sure on the syntax, because it has changed a fair bit between
 the releases (2.1 -> 2.1-stables -> 2.1.5-release -> 2.1.5-stable )

 Peter

--
 Peter Childs  ---  http://www.imforei.apana.org.au/~pjchilds
  Finger pjchilds@al.imforei.apana.org.au for public PGP key
         Drag me, drop me, treat me like an object!



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199609061410.XAA10009>