This one is for the archives.
If anyone would donate their time to replying to this one, It would be appreciated. 

Im trying to setup a firewall that for a time-limited period block IP's that send 
packets to specified ports.
After time has expired the ip will be allowed again.

With this setup;

        ipfw add 100 check-state
        ipfw add 1000 skipto 2000 tcp from any to any 445
        ...
        ipfw add 2000 deny ip from any to any keep-state
        ...

Would this setup a stateful block against that IP address, blocking all IP traffic 
from that particularly evil ip
Or would it just match the specifics? Would I have to do this instead to achieve this?

        ipfw add 100 check-state
        ipfw add 1000 skipto 2000 tcp from any to any 445 keep-state
        ...
        ipfw add 2000 deny ip from any to any
        ...

- Sten
_______________________________________________
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Reply via email to