Re: firewall rules do not get read

From: Alex de Kruijff (freebsd_at_akruijff.dds.nl)
Date: 11/20/03

  • Next message: Socketd: "5.1-Release<<WNIC problem" 
    Date: Thu, 20 Nov 2003 15:03:41 +0100
To: Chip <chip@wiegand.org>

    On Wed, Nov 19, 2003 at 09:38:34PM -0800, Chip wrote:
    > I noticed my firewall rules are not being read. I have rc.conf set to
    > read the file rc.firewall. In rc.firewall the first line is add divert
    > natd etc etc. that is followed by pass all from any to any etc etc. Then
    > nothing after that is read, it is all ignored.
    > If I comment out the line pass all from any to any then nothing works to
    > access the internet.
    > I don't know what to do to make it read past those first two lines.
    > Any suggestions?

    Can you give me the output of 'ipfw s'. If that one doesn't work then
    try 'ipfw l'? 

    -- 
Alex
Articles based on solutions that I use:
http://www.kruijff.org/alex/index.php?dir=docs/FreeBSD/
_______________________________________________
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.org"
  • Next message: Socketd: "5.1-Release<<WNIC problem"

    Relevant Pages

    • Re: rc.order wrong (ipfw)
      ... Interface is configured for IP (manually or via DHCP) ... Firewall rules (ipfw or pf) are applied ...
      (freebsd-stable)
    • Bandwith limitations, NAT and transparent proxy
      ... On my FBSD gateway to the Internet I would like to use NAT (of course ... If my firewall rules look like: ... ipfw pipe 1 config bw 256Kbit/s queue 40Kbytes ... ipfw add 47 pipe 1 ip from any to any out via xl0 ...
      (freebsd-questions)
    • Bandwith limitations, NAT and transparent proxy
      ... If my firewall rules look like: ... ipfw pipe 1 config bw 256Kbit/s queue 40Kbytes ... ipfw add 47 pipe 1 ip from any to any out via xl0 ... ipfw add 50 divert 8668 ip from any to any via xl0 ...
      (freebsd-questions)
    • Re: RELENG_5 kernel b0rken with IPFIREWALL and without PFIL_HOOKS
      ... Checking firewall rules is a Good Thing. ... >to kldload ipfw, which will fail if ipfw is compiled into the kernel, ... 00200 deny ip from any to 127.0.0.0/8 ... Or am I missing your point? ...
      (freebsd-current)
    • Re: RESET FIREWALL WITHOUT REBOOT
      ... > IS THERE A WAY ACTIVATE ALL THIS WITHOUT A REBOOT ... > SOMETHING GOES WRONG WHICH USUALLY DOES WITH MY FIREWALL RULES ... ipfw add divert natd all from any to any via ep0 ...
      (freebsd-questions)