On May 28, 2008, at 6:43 PM, Chuck Swiger wrote:
You didn't mention which version of FreeBSD you are running-- that's rather important info.

Actually, I just checked, this is a 4.11 server, I thought it was running at least 6.2.

00200 allow tcp from any to me 80 setup
00200 allow icmp from any to me icmptype 0,3,8,11
00200 deny log ip from any to me

Also, surely these can't be the only IPFW rules you are using? If you want to use stateful rules, you need a keep-state argument, and you shouldn't be combining allow rules and deny rules into the same ruleset number...



Right, I have a :

00100 allow tcp from any to any established


in there as well, but noted on the later part.

--
Robert Blayzor, BOFH
INOC, LLC
[EMAIL PROTECTED]
http://www.inoc.net/~rblayzor/



_______________________________________________
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Reply via email to