Re: tricking myself w/ multihoming

From: Brian Reichert (reichert_at_numachi.com)
Date: 03/23/04

  • Next message: Robert Watson: "Re: in_pcbbind_setup(), etc." 
    Date: Tue, 23 Mar 2004 17:44:24 -0500
To: freebsd-net@freebsd.org

    On Tue, Mar 23, 2004 at 03:30:45PM -0500, Brian Reichert wrote:
    > I've modified my firewall rules on this box slightly:
    >
    > 00040 fwd 198.175.254.1 tcp from 198.175.254.8 to any 25
    > 00050 divert 8668 ip from any to any via rl1
    > 00100 allow ip from any to any via lo0
    > 00200 deny ip from any to 127.0.0.0/8
    > 00300 deny ip from 127.0.0.0/8 to any
    > 65000 allow ip from any to any
    > 65535 deny ip from any to any

    Lameness on my part; I was neglecting source vs destination ports:

    > 00040 fwd 198.175.254.1 tcp from 198.175.254.8 to any 25

    I've opened this to

       00040 fwd 198.175.254.1 tcp from 198.175.254.8 to any

    and now stuff's flowing.

    Sorry for the noise... 

    -- 
Brian Reichert				<reichert@numachi.com>
37 Crystal Ave. #303			Daytime number: (603) 434-6842
Derry NH 03038-1713 USA			BSD admin/developer at large	
_______________________________________________
freebsd-net@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "freebsd-net-unsubscribe@freebsd.org"
  • Next message: Robert Watson: "Re: in_pcbbind_setup(), etc."

    Relevant Pages

    • Re: IPFW, natd and an internal FTP server.
      ... do you can send a piece of you firewall rules to me that show me how ... 00050 divert 8668 ip from any to any via rl0 ... 00200 deny ip from any to 127.0.0.0/8 ... natd and an internal FTP server. ...
      (FreeBSD-Security)
    • Re: Sanity-check for my (working) ipfw rules please...
      ... Nick Withers wrote: ... My individual hosts have a set of firewall rules on each of them that ... deny tcp from any to any tcpflags syn,fin,rst,ack ... deny all from any to 169.254.0.0/16 via <public interface> ...
      (freebsd-questions)