Re: IPFW Rules and Games

2007-11-04 Thread Jack Barnett
[EMAIL PROTECTED] wrote: So basically the ruleset should be simple: ipfw -f flush # allow lo0 stuff # block some spoofs/attacks # if you are hosting gameservers from 192.168.17.3 or whatever, # you should (manually) open server ports, in other words, add # routes to 192.168.17.3 to specific

Re: IPFW Rules and Games

2007-11-04 Thread deeptech71
Jack Barnett wrote: [EMAIL PROTECTED] wrote: So basically the ruleset should be simple: ipfw -f flush # allow lo0 stuff # block some spoofs/attacks # if you are hosting gameservers from 192.168.17.3 or whatever, # you should (manually) open server ports, in other words, add # routes to

IPFW Rules and Games

2007-11-02 Thread Jack Barnett
Lots of people play games here and basically a pain to keep trying to get these stupid things to work with individual rules for each. I'm running FreeBSD 6.x with IPFW/natd I get a dynamic IP from my ISP and the internal nic is 192.168.17.1 Everything inside the network is 192.168.17.xxx

Re: IPFW Rules and Games

2007-11-02 Thread Jack Barnett
Bob Hall wrote: On Fri, Nov 02, 2007 at 04:59:27AM -0500, Jack Barnett wrote: I added this for a temporary fix: ${fwcmd} add pass all from any to any I don't think that is the right answer; That allows to much in? Yes. I've tried these per the docs: ${fwcmd} add allow

Re: IPFW Rules and Games

2007-11-02 Thread Jack Barnett
Jack Barnett wrote: Bob Hall wrote: On Fri, Nov 02, 2007 at 04:59:27AM -0500, Jack Barnett wrote: I added this for a temporary fix: ${fwcmd} add pass all from any to any I don't think that is the right answer; That allows to much in? Yes. I've tried these per the docs:

Re: IPFW Rules and Games

2007-11-02 Thread Jack Barnett
Jack Barnett wrote: Jack Barnett wrote: Jack Barnett wrote: Bob Hall wrote: On Fri, Nov 02, 2007 at 04:59:27AM -0500, Jack Barnett wrote: I added this for a temporary fix: ${fwcmd} add pass all from any to any I don't think that is the right answer; That allows to much in?

Re: IPFW Rules and Games

2007-11-02 Thread RW
On Fri, 02 Nov 2007 04:59:27 -0500 Jack Barnett [EMAIL PROTECTED] wrote: Lots of people play games here and basically a pain to keep trying to get these stupid things to work with individual rules for each. I'm running FreeBSD 6.x with IPFW/natd I get a dynamic IP from my ISP and the

Re: IPFW Rules and Games

2007-11-02 Thread Jack Barnett
RW wrote: On Fri, 02 Nov 2007 04:59:27 -0500 Jack Barnett [1][EMAIL PROTECTED] wrote: Lots of people play games here and basically a pain to keep trying to get these stupid things to work with individual rules for each. I'm running FreeBSD 6.x with IPFW/natd I get a dynamic IP from my

Re: IPFW Rules and Games

2007-11-02 Thread Bob Hall
On Fri, Nov 02, 2007 at 04:59:27AM -0500, Jack Barnett wrote: I added this for a temporary fix: ${fwcmd} add pass all from any to any I don't think that is the right answer; That allows to much in? Yes. I've tried these per the docs: ${fwcmd} add allow all from any to any out via

Re: IPFW Rules and Games

2007-11-02 Thread Jack Barnett
Jack Barnett wrote: Jack Barnett wrote: Bob Hall wrote: On Fri, Nov 02, 2007 at 04:59:27AM -0500, Jack Barnett wrote: I added this for a temporary fix: ${fwcmd} add pass all from any to any I don't think that is the right answer; That allows to much in? Yes. I've

Re: IPFW Rules and Games

2007-11-02 Thread deeptech71
Hi, Jack, let's see. Jack Barnett wrote: Lots of people play games here and basically a pain to keep trying to get these stupid things to work with individual rules for each. I'm running FreeBSD 6.x with IPFW/natd I get a dynamic IP from my ISP and the internal nic is 192.168.17.1

Re: IPFW Rules and Games

2007-11-02 Thread Bob Hall
On Fri, Nov 02, 2007 at 10:59:04PM +0100, [EMAIL PROTECTED] wrote: onet=`ifconfig xl0 | grep inet | awk '{print $6}'` I'm not sure about this. Isn't the sixth word the broadcast address (ending with .255)? It's correct. I've been using this in my firewall file since FBSD 4.something.