Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 14 Apr 1998 17:51:31 -0400 (EDT)
From:      Tim Gustafson <guff@falconsoft.com>
To:        Spike Gronim <spork@cncn.com>
Cc:        Dima Dorfman <webmaster@zwb.net>, fbsdqs <freebsd-questions@FreeBSD.ORG>
Subject:   Re: IPFW
Message-ID:  <Pine.BSF.3.96.980414175001.6296B-100000@falconsoft.com>
In-Reply-To: <Pine.BSF.3.96.980414162215.367C-100000@pigstuy>

next in thread | previous in thread | raw e-mail | index | archive | help
> My ipfwcommands script now reads:
> 
> #!/bin/sh
> 
> ipfw add 10000 deny tcp from localhost to panix.com
> ipfw add 10010 deny tcp from panix.com to localhost
> ipfw add allow ip from any to any
> 
> and it still does not add the first two rules.

Something to keep in mind is that before your firewalls rules are actually
loaded, the server has no ability to lookup DNS, since it doesn't have any
rights to go to the outside network.  Firewall rules are not just for the
users of a system, but for the system as well.  Try adding sumthin like:

ipfw add 09000 allow udp from any to any 53
ipfw add 09000 allow tcp from any to any 53

tim



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.3.96.980414175001.6296B-100000>