The reason I have the # before the portmap is because I cant use ping from a client machine if it is there, and being as I was only playing with it and dont need it I have disabled that particular bit.
Matt. [root]/home/matt# nmap -sS -vvv www.smart.net.au Starting nmap V. 3.00 ( www.insecure.org/nmap/ ) sendto in send_tcp_raw: sendto(3, packet, 40, 0, 203.63.238.10, 16) => No route to host Sleeping 15 seconds then retrying 5 pass out quick on sis0 proto tcp from any to any flags S/FSRPAU keep state keep frags 9264 pass out quick on sis0 proto udp from any to any keep state 13 pass out quick on sis0 proto icmp from any to any keep state 5 block out quick on sis0 from any to any 1 pass out quick on sis1 proto tcp from any to any flags S/FSRPAU keep state keep frags 7154 pass out quick on sis1 proto udp from any to any keep state 9 pass out quick on sis1 proto icmp from any to any keep state 0 pass out quick on wi0 proto tcp from any to any flags S/FSRPAU keep state keep frags 0 pass out quick on wi0 proto udp from any to any keep state 2 pass out quick on wi0 proto icmp from any to any keep state 2 block out quick on sis1 from any to any 1 block out quick on wi0 from any to any 47952 pass out quick on lo0 from any to any ----- Original Message ----- From: "Bruno Saverio Delbono" <[EMAIL PROTECTED]> To: "Matt Pearce" <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]> Sent: Sunday, February 09, 2003 4:41 PM Subject: Re: IPFilter, Nmap & FreeBSD 4.7 > Making, drinking tea and reading an opus magnum from Matt Pearce: > >The address I am trying to Nmap is an external address and below I have > >included my ipf.rules and ipnat.rules contents below. > > Please send a nmap -vvv request as root and a ipfstat -ho as well. > > >map sis0 192.168.0.0/16 -> 0/32 #portmap tcp/udp auto > > Why do you have a "#" before portmap? Use something like: > > map sis0 192.168.0.0/16 -> 0/32 portmap tcp/udp 10000:60000 > map sis0 192.168.0.0/16 -> 0/32 > > and reload and try and send ipfstat -ho > > -Bruno > > > ---------------------------------------------------------------------- > Our company accepts no liability for the content of this email, or for > the consequences of any actions taken on the basis of the information > provided, unless that information is subsequently confirmed in > writing. If you are not the intended recipient you are notified that > disclosing, copying, distributing or taking any action in reliance on > the contents of this information is strictly prohibited. > http://www.wf0.com > ---------------------------------------------------------------------- > > > > >
