Re: ipfw dosnt want to run a rule ???? is it possible ?

2006-04-03 Thread Bob Johnson
On 4/1/06, michael [EMAIL PROTECTED] wrote:
 Thanx for ure answer, u're french is prety understandable ;-)

 I'm really sorry, i dont have subscribe to this mailing list, i was
 trying to send mail to [EMAIL PROTECTED] and i've made a mistake,
 and the second mail was for another mailling list (what happend this
 evening ???) but if u're able to help me it's welcome.


[EMAIL PROTECTED] is a mailing list

 This is my problem (sorry for my bad english):
 I've made a firewall with ipfw on a freebsd 6, i sent the rules (ipfw -a
 -d -t list) and the log

 I really don't understand why the packet don't match with the rule.

Sorry I can't reply in French, but from your original posting:

00020 0 0 skipto 800 udp from any to any dst-port 53 out via rl0 setup
keep-state
00021 0 0 skipto 800 udp from any to any dst-port 53 out via rl0 setup
keep-state
00022 0 0 skipto 800 tcp from any to any dst-port 53 out via rl0 setup
keep-state
00023 0 0 skipto 800 udp from any to any out via rl0 setup keep-state

I don't think there is such a thing as a UDP setup packet, so a UDP
setup filter will probably never match a packet.  It might work as
you expect if you removed setup from the UDP packet filters.

- Bob
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: ipfw dosnt want to run a rule ???? is it possible ?

2006-04-03 Thread michael
Ok, u're right,

i set up the rules and all is ok, now i've two problems:

first,
i think i'm resolving it... = i want to block MAC adress, so i've found
informations who explain the nessessary BRIDGE option in the kernel conf
(so i'm compiling a new one at the moment) and later = ipfw add deny
from any to any MAC any xx:xx:xx:xx:xx  ... will work...

second,
i will block traffic like msn or other messenger using the port 80, and
block sites filtering his contents, and for that i've no idea how to do that

so if someone have understand what i try to explain in english...

thanx for ure help

Michael.


Bob Johnson a écrit :

On 4/1/06, michael [EMAIL PROTECTED] wrote:
  

Thanx for ure answer, u're french is prety understandable ;-)

I'm really sorry, i dont have subscribe to this mailing list, i was
trying to send mail to [EMAIL PROTECTED] and i've made a mistake,
and the second mail was for another mailling list (what happend this
evening ???) but if u're able to help me it's welcome.




[EMAIL PROTECTED] is a mailing list

  

This is my problem (sorry for my bad english):
I've made a firewall with ipfw on a freebsd 6, i sent the rules (ipfw -a
-d -t list) and the log

I really don't understand why the packet don't match with the rule.



Sorry I can't reply in French, but from your original posting:

00020 0 0 skipto 800 udp from any to any dst-port 53 out via rl0 setup
keep-state
00021 0 0 skipto 800 udp from any to any dst-port 53 out via rl0 setup
keep-state
00022 0 0 skipto 800 tcp from any to any dst-port 53 out via rl0 setup
keep-state
00023 0 0 skipto 800 udp from any to any out via rl0 setup keep-state

I don't think there is such a thing as a UDP setup packet, so a UDP
setup filter will probably never match a packet.  It might work as
you expect if you removed setup from the UDP packet filters.

- Bob
  


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: ipfw dosnt want to run a rule ???? is it possible ? [Was ipfw n'applique pas une regle ???? est-ce possible ?]

2006-04-02 Thread Duane Whitty

michael wrote:

Bonjour,

Ok,

So, i'll correct u're french because u seems to want to learn it and i
think u're french is not to bad
And for my problem do think about a begining of an answer ?

  

Hello,

Thank you for correcting my French.  I need much practice!

As for your ipfw problem, I do not know enough to help you.
I suggest you pose your question again, this time entirely in English
with all the relevant details, to freebsd-questions@freebsd.org and also
to [EMAIL PROTECTED] 


There are many knowledgeable people on
both these lists who may hopefully be willing to help you, especially as
the French language mailing list appears to not be operating any longer.

Sincerely,

--Duane
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: ipfw dosnt want to run a rule ???? is it possible ?

2006-04-01 Thread michael
Thanx for ure answer, u're french is prety understandable ;-)

I'm really sorry, i dont have subscribe to this mailing list, i was
trying to send mail to [EMAIL PROTECTED] and i've made a mistake,
and the second mail was for another mailling list (what happend this
evening ???) but if u're able to help me it's welcome.

This is my problem (sorry for my bad english):
I've made a firewall with ipfw on a freebsd 6, i sent the rules (ipfw -a
-d -t list) and the log

I really don't understand why the packet don't match with the rule.

Regards,

Michael.



Duane Whitty a écrit :

 michael wrote:

 Bonjour,

 Tout d'abord bonjour à tous c'est mon premier mail sur cette liste de
 diffusion !

   

 Bonjour Michael,

 Pardonez-moi mon francais.  Je ne parle pas francais bien, mais
 j'esserais (?)

 Bien venue a cette liste de diffusion.  Les participants de cette
 liste parle
 anglais beaucoup du temp. Je croix que plus trop nous comprenons le
 francais. Je me solace.
 Je croix qu' il y une liste de diffusion en francais
 peut etre.  Essayez-vous http://www.freebsd-fr.org ?

 Peut etre vous parlez l'anglais?  Je souhais que je vous offrez plus
 aider.

 Solace pour a coupez votre lingue!

 Sincerement,

 Duane Whitty,

 P.S.
 If you speak English I would like
 to apologize for my terrible use of
 your language.


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]