Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 20 May 2000 18:00:30 -0400
From:      Michael Feld <mfeld@iname.com>
To:        freebsd-ipfw@freebsd.org
Subject:   IPFW Ruleset help
Message-ID:  <p04310102b54cb9353341@[192.168.151.4]>

next in thread | raw e-mail | index | archive | help
HI there all...

I'm new to this list.  I have a static IP and a  private network 
behind a dual-homed free-bsd box, and I need a set of basic IPFW 
rules.  The following rules don't work, and basically block off all 
access from inside out.  Does anyone have a basic set they could post 
or could someone tell me how to fix these?   I'm naked to the world 
here, so any help would be appreciated.  This ruleset is clearly not 
complete, but I was hoping I might get a little aid in setting things 
up.  Thanks!!!

Michael

00100 divert 8668 ip from any to any via ep0
00100 allow ip from any to any via lo0
00200 deny ip from any to 127.0.0.0/8
00500 allow tcp from any to <my ip address> 22 setup
00600 allow udp from <my ip address> to any 53
00700 allow udp from any 53 to <my ip address>
00800 allow udp from 192.168.151.0/24 to any 53
00900 allow udp from any 53 to 192.168.151.0/24
02000 allow tcp from any to any established
65100 deny log tcp from any to any in recv <my ip address> setup
65200 allow tcp from any to any setup
65535 deny ip from any to any


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-ipfw" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?p04310102b54cb9353341>