Faulconer, Steven M. wrote:
Durn it! I forgot to hit reply to all and then change the freakin' headers again.Ok, when I changed my main rule to:pass in quick on dmfe0 proto tcp/udp from any to any port = 80 keep state I was able to get to the web server from the internet. So, using the firewall's hostname was not the right solution there. Then I thought about something I read, that ipnat happens BEFORE ipf, so, by the time it hit the rules, the ipnat had already changed the addresses, so I had to tell ipf to allow the connections to the webserver. This appears to work correctly. I have a question though. Is it possible to see a list of all of the currently applied rules to ipf? I know ipnat has a -l option, but ipf doesn't (at least have a -l option). I ask on the list because the configuration of my firewall does not have 'man' available.
Install man.
I *think* it's something like ipf -io but I'm not sure.
--
Phil Dibowitz [EMAIL PROTECTED]
Freeware and Technical Pages Insanity Palace of Metallica
http://home.earthlink.net/~jaymzh666/ http://www.ipom.com/
"They that can give up essential liberty to obtain a little temporary
safety deserve neither liberty nor safety."
- Benjamin Franklin, 1759
