Re: ipfw pipes + firewall

2003-11-29 Thread Alex de Kruijff
On Sat, Nov 29, 2003 at 02:29:13PM +0800, Khairil Yusof wrote: On Sat, 2003-11-29 at 06:45, Alex de Kruijff wrote: 00100 83 11350 pipe 1 ip from any to any out 00200 93 11266 pipe 2 ip from any to any in 00300 0 0 check-state 00400 0 0 deny tcp from any to any

ipfw pipes + firewall

2003-11-28 Thread Khairil Yusof
I've read the man pages, and tested it out, and just want to confirm that what Im doing is right and that I didn't miss anything. Disable one_pass so that packets after matching pipe rule will continue on to other rules. Without this, packets matching pipes are not not applied again against

Re: ipfw pipes + firewall

2003-11-28 Thread Alex de Kruijff
On Fri, Nov 28, 2003 at 09:37:06PM +0800, Khairil Yusof wrote: I've read the man pages, and tested it out, and just want to confirm that what Im doing is right and that I didn't miss anything. Disable one_pass so that packets after matching pipe rule will continue on to other rules. Without

Re: ipfw pipes + firewall

2003-11-28 Thread Khairil Yusof
On Sat, 2003-11-29 at 06:45, Alex de Kruijff wrote: 00100 83 11350 pipe 1 ip from any to any out 00200 93 11266 pipe 2 ip from any to any in 00300 0 0 check-state 00400 0 0 deny tcp from any to any established 01400 103 14855 allow tcp from any to me dst-port 22 in setup