Just a couple more questions on the migation to ipfw and
this much should be done. Do I need to write for the "out"
rule in ipfw, "out xmit via dc0"? Similarly for the "in"
rule, do I need the "recv"? I thought I'd better check
with the list for input on this.
How close did I come with these 6 lines?
thanks very much!!
gary
# Inside Interface (ipf)
{IPF] pass out quick on dc1 proto tcp from any to any keep state
{IPF] pass out quick on dc1 proto icmp from any to any keep state
{IPF] block out quick on dc1 all
{IPF] pass in quick on dc1 proto tcp from any to any keep state
{IPF] pass in quick on dc1 proto icmp from any to any keep state
{IPF] block in quick on dc1 all
# Loopback Interface
{IPF] pass in quick on lo0 all
{IPF] pass out quick on lo0 all
# Inside Interface (ipfw)
[IPFW] add 200 allow tcp from any to any out xmit via dc0 keep-state
[IPFW] add 200 allow icmp from any to any out xmit via dc0 keep-state
[IPFW] add deny ip from any to any out xmit via dc0
[IPFW] add 200 allow tcp from any to any in recv via dc0 keep-state
[IPFW] add 200 allow icmp from any to any in recv via dc0 keep-state
[IPFW] add deny ip from any to any in recv via dc0
# Loopback Interface
[IPFW] add allow ip from 127.0.0.1 to 127.0.0.1 in recv via lo0
[IPFW] add allow ip from 127.0.0.1 to 127.0.0.1 out xmit via lo0
--
Gary Kline [EMAIL PROTECTED] www.thought.org Public service Unix
To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-questions" in the body of the message
