ipfstat -io
-----Original Message-----
From: Phil Dibowitz [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, December 04, 2002 13:31 PM
To: IP Filter
Subject: Re: Simple (yet bothersome) configuration (solved)
Faulconer, Steven M. wrote:
> Ok, when I changed my main rule to:
>
> pass in quick on dmfe0 proto tcp/udp from any to any port = 80 keep state
>
> I was able to get to the web server from the internet. So, using the
> firewall's hostname was not the right solution there. Then I thought about
> something I read, that ipnat happens BEFORE ipf, so, by the time it hit the
> rules, the ipnat had already changed the addresses, so I had to tell ipf to
> allow the connections to the webserver. This appears to work correctly.
>
> I have a question though. Is it possible to see a list of all of the
> currently applied rules to ipf? I know ipnat has a -l option, but ipf
> doesn't (at least have a -l option). I ask on the list because the
> configuration of my firewall does not have 'man' available.
Durn it! I forgot to hit reply to all and then change the freakin'
headers again.
Install man.
I *think* it's something like ipf -io but I'm not sure.
--
Phil Dibowitz [EMAIL PROTECTED]
Freeware and Technical Pages Insanity Palace of Metallica
http://home.earthlink.net/~jaymzh666/ http://www.ipom.com/
"They that can give up essential liberty to obtain a little temporary
safety deserve neither liberty nor safety."
- Benjamin Franklin, 1759
