I have an old machine running FBSD-4.0 using ipfw. It's been working as is for a few years, but I decided to look it over and make some adjustments. I noticed what appears to be a problem - even though rc.conf calls for firewall_type=client, when I run ipfw show I get only lines -
the divert 8668 line for nat
allow ip from any to any
deny ip from any to any


The rc.conf calls firewall_script=/etc/rc.firewall which is the standard that comes installed in FBSD.
I have changed the line firewall_type to open and simple and they both result in the same ipfw show response. My kernel is compiled without ipfirewall_default_accept, so it should be default to deny.
I know the machine needs to be upgraded but it has been working fine for years. I was looking into blocking instant messaging occasionally so my son can concentrate on his homework, and some how speed up my peer to peer connections which appear to rely on udp.
Anyway, any idea what might be wrong with my setup, it not reading the rc.firewall script.
--
chip




_______________________________________________
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Reply via email to