Thanks All
In the end I build a new box with freebsd V5 and then built the kernel
on that box, copied it to my main box and installed it all worked ok.

But now have another Q when I tried to insert rule as per the IP Filter
HOWTO Manual i.e.:
pass out quick proto udp from any to any port 33434><33690 keep state
I get this error

nebula:root % ipf -Fa -f /etc/ipf.rules
33: unknown port "33434><33690"
below is my ipf.rules file now ,this computer is already inside a
firewall and only is for web and radius
block in log all
pass out quick proto icmp from  any to any icmp-type 8 keep state
# Allow all ssh traffic
pass in quick proto tcp from any to any port = 22 flags S keep state
# httpd
pass  in quick  proto tcp     from any to any port = 80 flags S keep
state
# httpsd
pass  in quick  proto tcp     from any to any port = 443 flags S keep
state
# Radius
pass in quick proto udp from any to any port = 1645 keep state
pass in quick proto udp from any to any port = 1646 keep state
pass in quick proto udp from any to any port = 1812 keep state
pass in quick proto udp from any to any port = 1813 keep state

pass out quick proto tcp from any to any flags S keep state

# Allow NTP for Network Time and Traceroute

pass out quick proto udp from any to any keep state
block in quick all
block out quick all




Reply via email to