Date: Fri, 3 Mar 2000 12:35:48 +0200 From: Marc Silver <marcs@is.co.za> To: "Lowkrantz, Goran" <Goran.Lowkrantz@infologigruppen.se> Cc: freebsd-questions@FreeBSD.ORG Subject: Re: Attach to server on FW breaks Message-ID: <20000303123548.D18316@is.co.za> In-Reply-To: <B500F74C6527D311B61F0000C0DF5ADC0D49FF@valhall.ign.se> References: <B500F74C6527D311B61F0000C0DF5ADC0D49FF@valhall.ign.se>
next in thread | previous in thread | raw e-mail | index | archive | help
Have you got something like this in your firewall config? # Allow TCP through if setup succeeded $fwcmd add pass tcp from any to any established This is taken from /etc/rc.firewall. What it sounds like to me (and I could be wrong) is that the connection is being accepted and then afterwards the packets are being truncated by the firewall because you don't have that line in. Try it and hopefully it will work. Cheers, Marc On Fri, Mar 03, 2000 at 10:34:36AM +0100, Lowkrantz, Goran wrote: > > I am totaly at loss with this, just don't understand why it does not work > and can't find anything in the archives. Please enlighten me. > > I have a FW based on FreeBSD 3.4-STABLE with ipfw. On this I try to run a > server listening to the external interface. I have added the following rule: > > allow log tcp from X.X.X.X to Y.Y.Y.Y Z setup > > When connecting, I get the following entry in the log: > > Mar 3 10:03:22 ns2 /kernel: ipfw: 3900 Accept TCP X.X.X.X:13955 Y.Y.Y.Y:Z > in via xl0 > > and they both wait for the client to send the first data. On the first send > from the client, the connection is broken and the server receives an EOF. > > I have the server in hosts.allow and even tested with an ALL:ALL:allow first > rule but it's the same either way. And yes, rebooted between test to make > sure it was seen. > > I just don't understand whats happening, as the filterline before this is > the smtpd accept line, looking like this > > allow log tcp from any to Y.Y.Y.Y 25 setup > > and it works! > > I need new ideas!! > > Cheers, > GLZ > > --- > Goran Lowkrantz Email : goran.lowkrantz@infologigruppen.se > Infologigruppen Alfa AB Telephone: Nat 070-587 8782 Fax: Nat 070-615 > 8782 > Box 202 Int +46 70-587 8782 Int +46 70-615 > 8782 > 941 25 Pitea, Sweden > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-questions" in the body of the message -- Marc Silver IS Hosting Infrastructure The Internet Solution Tel: (+27 11) 283 5500 Fax: (+27 11) 283 5001 E-mail: marcs@is.co.za Web: www.is.co.za To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20000303123548.D18316>