help needed for ipfw rules

2005-09-26 Thread Ertan Kucukoglu

Hi,

I have a problem blocking foreign intruders for specific ports in ipfw.

One of my friends have 4.X-Stable running in production for proxy, 
e-mail, virus etc. Server also have natd and ipfw installed on it. We 
have following rule set.

-
00050 2132 1212881 divert 8668 ip from any to any via dc1
00100 1078 4537400 allow ip from any to any via lo0
002000   0 deny ip from any to 127.0.0.0/8
003000   0 deny ip from 127.0.0.0/8 to any
004000   0 allow tcp from 192.168.0.0/24 to me 23
005000   0 deny tcp from 192.168.0.69 to me 1863
005500   0 deny tcp from 192.168.0.63 to me 1863
006000   0 deny tcp from 192.168.0.69 to me 80
006500   0 deny tcp from 192.168.0.63 to me 80
010000   0 allow tcp from 192.168.0.0/16 to me 21
010100   0 deny tcp from any to me 21
011000   0 allow tcp from 212.58.X.X to me 1433 via dc1 (ip 
intentionally hided)

011100   0 deny tcp from any to me 1433 via dc1
65000 5467 3180867 allow ip from any to any
65535 4654  322885 deny ip from any to any
-

Natd is diverting port 1433 to an internal machine.

When I try with a different ip address on Internet than 212.58.x.x, and 
I can easily get connect to directed servers' 1433 port.


I'm sure that I'm missing something, but I can not recognize what it is 
at the moment. Any help will be appreciated.


Regards,

--
Ertan Küçükoğlu
[EMAIL PROTECTED]

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


usb modem howto for newbie

2002-11-19 Thread Ertan Kucukoglu
Hello,

I want to use a USB modem on FreeBSD 4.7-STABLE.

First I do not know where to start. Is there any how-to
pages?
I looked at umodem.c file. There is not so much
explanations in the code.

I searched the archieves for a starting point. I could not
find any helpful message for me.

Here is what I could manage:
kldload usb
kldload umodem
ls -l /dev/usb*
crw-rw  1 root  operator  108, 255 11 Eki 22:33
/dev/usb
crw-rw  1 root  operator  108,   0 11 Eki 22:33
/dev/usb0
crw-rw  1 root  operator  108,   1 19 Kas 19:27
/dev/usb1
usbdevs -v
Controller /dev/usb0:
addr 1: self powered, config 1, UHCI root hub(0x),
Intel(0x), rev 1.00
 port 1 powered
 port 2 addr 2: power 100 mA, config 1, USB
Communicator(0x7554), STMicroelectronics(0x0483), rev 1.01

Regards,

Ertan Kucukoglu

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message



MSN voice conversation + NATD problem.

2002-11-03 Thread Ertan Kucukoglu
Hello,

My system is a FreeBSD 4.7-STABLE. I use dial-up internet
connection.

I wanted to setup one machine that can make voice
connections over natd. My /etc/natd.conf looks like below:
ozlerplastik@ertank ~ cat /etc/natd.conf
log yes
same_ports yes
dynamic yes
#MSN talk ports
redirect_port tcp ertank:6901 6901
redirect_port udp ertank:6901 6901


My command line is natd -n tun0 -f /etc/natd.conf. ertank
is in my hosts file and has a static 192.168.0.20 ip no.

When I try to make voice connection to other machine I just
can not connect.

We tried netmeeting too. It uses same MSN ports. And, under
netmeeting, other end see my ip number as 192.168.0.20. I
do not know why. But, I guess the problem is this ip no. It
can not reach my machine with this ip and connection just
timeouts.

Is there anybody who managed to make voice conversations
over natd under FreeBSD?

I need help about it.

Regards,

--Ertan

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message



ls shows hidden files when used by root

2002-10-30 Thread Ertan Kucukoglu
Hi all,

When I su to root or login as root from console. ls shows
hidden files, too. No matter I use ls -a or ls result
is same:

[root@escalade ~]ls
.ICEauthority   .ncrecent   a.out
.Xauthority .pinerc book
.addressbook.profiledeneme
.addressbook.lu .prx7p0lvM
 example_footer.php
.bash_history   .prxLSQn7i
 example_head.php
.cpan   .sshftp
.cshrc  .twmWp73RS  lazim
.fvwm   .twmlpE18u  mail
.history.xinitrcmbox
.klogin .xsession-errors
   muratsyslog.c
.login  .xsmGlMH9k  nohup.out
.mozilla.xsmKYc0tn  rbin
.mysql_history  XF86Config  sources
[root@escalade ~]ls -a
.   .mysql_history  a.out
..  .ncrecent   book
.ICEauthority   .pinerc deneme
.Xauthority .profile
   example_footer.php
.addressbook.prx7p0lvM
 example_head.php
.addressbook.lu .prxLSQn7i  ftp
.bash_history   .sshlazim
.cpan   .twmWp73RS  mail
.cshrc  .twmlpE18u  mbox
.fvwm   .xinitrc
   muratsyslog.c
.history.xsession-errorsnohup.out
.klogin .xsmGlMH9k  rbin
.login  .xsmKYc0tn  sources
.mozillaXF86Config
[root@escalade ~]

Is there a way to change this behaviour? I do not wish to
see hidden files as root. When I need I could always use ls
-a.

I could not find a solution in ~/.csh file and
/etc/csh.cshrc.

Regards,

--Ertan

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message