Re: continued IPFW issues... (actually a lack of ability on my part)

2004-02-14 Thread Jez Hancock
On Sat, Feb 14, 2004 at 03:27:35PM -0600, Eric F Crist wrote: I'm still having some sort of issues with ipfw rules on my server. I've got a cgi based irc client installed, and I can't connect. Also, it seems as if my DNS server isn't able to send queries out. An ipfw show displays the

RE: continued IPFW issues... (actually a lack of ability on my part)

2004-02-14 Thread Eric F Crist
-Original Message- From: Jez Hancock [mailto:[EMAIL PROTECTED] On Behalf Of Jez Hancock Sent: Saturday, February 14, 2004 5:36 PM To: Eric F Crist Cc: FreeBSD questions List Subject: Re: continued IPFW issues... (actually a lack of ability on my part) On Sat, Feb 14, 2004 at 03:27:35PM

Re: continued IPFW issues... (actually a lack of ability on my part)

2004-02-14 Thread Jez Hancock
On Sat, Feb 14, 2004 at 05:59:14PM -0600, Eric F Crist wrote: On Sat, Feb 14, 2004 at 03:27:35PM -0600, Eric F Crist wrote: I'm still having some sort of issues with ipfw rules on my server. I've got a cgi based irc client installed, and I can't connect. Also, it seems as if my DNS

Re: continued IPFW issues... (actually a lack of ability on my part)

2004-02-14 Thread Eric F Crist
On Saturday 14 February 2004 06:59 pm, Jez Hancock wrote: On Sat, Feb 14, 2004 at 05:59:14PM -0600, Eric F Crist wrote: On Sat, Feb 14, 2004 at 03:27:35PM -0600, Eric F Crist wrote: I'm still having some sort of issues with ipfw rules on my server. I've got a cgi based irc client

Re: continued IPFW issues... (actually a lack of ability on my part)

2004-02-14 Thread Erik Trulsson
On Sat, Feb 14, 2004 at 07:42:28PM -0600, Eric F Crist wrote: On Saturday 14 February 2004 06:59 pm, Jez Hancock wrote: On Sat, Feb 14, 2004 at 05:59:14PM -0600, Eric F Crist wrote: On Sat, Feb 14, 2004 at 03:27:35PM -0600, Eric F Crist wrote: I'm still having some sort of issues with

Re: continued IPFW issues... (actually a lack of ability on my part)

2004-02-14 Thread Eric F Crist
My bad, I found the log entry after your prodding. After enabling logging in the ruleset and enabling the sysctl variable, I get the following output in a tail /var/log/security: Feb 14 19:59:44 grog kernel: ipfw: 65534 Deny UDP 192.168.0.1:51598 255.255.255.255:61112 in via dc0 Feb 14

Re: continued IPFW issues... (actually a lack of ability on my part)

2004-02-14 Thread Erik Trulsson
On Sat, Feb 14, 2004 at 08:01:07PM -0600, Eric F Crist wrote: My bad, I found the log entry after your prodding. After enabling logging in the ruleset and enabling the sysctl variable, I get the following output in a tail /var/log/security: Feb 14 19:59:44 grog kernel: ipfw: 65534 Deny

Re: continued IPFW issues... (actually a lack of ability on my part)

2004-02-14 Thread Eric F Crist
On Saturday 14 February 2004 08:09 pm, Erik Trulsson wrote: On Sat, Feb 14, 2004 at 08:01:07PM -0600, Eric F Crist wrote: My bad, I found the log entry after your prodding. After enabling logging in the ruleset and enabling the sysctl variable, I get the following output in a tail

Re: continued IPFW issues... (actually a lack of ability on my part)

2004-02-14 Thread Eric F Crist
On Saturday 14 February 2004 08:14 pm, Eric F Crist wrote: Well, from what I understand, isn't udp a state-less protocol? How would established/keepstate/check-state work with that? Ok, so I read that check-state/keep-state should be able to work with udp. According to the man page, I should