Re: Blocking RIP requests on firewall

2003-08-14 Thread Mark Woodson
On Wednesday 13 August 2003 11:27 am, Darryl Hoar wrote: -Original Message- From: Mark Woodson [mailto:[EMAIL PROTECTED] Sent: Wednesday, August 13, 2003 11:54 AM To: [EMAIL PROTECTED] Subject: Re: Blocking RIP requests on firewall On Wednesday 13 August 2003 07:53 am, Darryl Hoar

Re: Blocking RIP requests on firewall

2003-08-14 Thread Lowell Gilbert
Darryl Hoar [EMAIL PROTECTED] writes: Greetings, I have a FreeBSD 4.7S machine that is running IPFilter and is configured as a firewall. My external interface is xl0. I put block in quick on xl0 proto udp from 10.0.0.1 to any port = 520 All of the packets are coming from 10.0.0.1?

Re: Blocking RIP requests on firewall

2003-08-14 Thread Mark Woodson
(top quoting make following threads difficult) On Wednesday 13 August 2003 12:49 pm, Darryl Hoar wrote: ipfstat -in shows: @1 pass in quick on xl0 proto udp from 10.0.0.1/32 to any port = 68 keep state @2 block return-rst in log quick on xl0 proto tcp from any to any @3 block

Blocking RIP requests on firewall

2003-08-14 Thread Darryl Hoar
Greetings, I have a FreeBSD 4.7S machine that is running IPFilter and is configured as a firewall. My external interface is xl0. I put block in quick on xl0 proto udp from 10.0.0.1 to any port = 520 reloaded the rules (by rebooting. I have it locked down). it still generates log entries in my

RE: Blocking RIP requests on firewall

2003-08-14 Thread Darryl Hoar
:51 PM To: [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Subject: Re: Blocking RIP requests on firewall Darryl Hoar [EMAIL PROTECTED] writes: Greetings, I have a FreeBSD 4.7S machine that is running IPFilter and is configured as a firewall. My external interface is xl0. I put block in quick

Re: Blocking RIP requests on firewall

2003-08-14 Thread Lowell Gilbert
] Subject: Re: Blocking RIP requests on firewall Darryl Hoar [EMAIL PROTECTED] writes: Greetings, I have a FreeBSD 4.7S machine that is running IPFilter and is configured as a firewall. My external interface is xl0. I put block in quick on xl0 proto udp from 10.0.0.1 to any port