Firewall problem
Vince Hoffman
Vince.Hoffman at uk.circle.com
Wed Oct 1 11:25:25 PDT 2003
you have "allow ip from any to any" before your deny rules, unless my memory
is seriously faulty (always possible) a packet will match that rule and
never get to your deny rules.
> -----Original Message-----
> From: Gary [mailto:gv-list-freebsdquestions at mygirlfriday.info]
> Sent: 01 October 2003 19:18
> To: FreeBSD
> Subject: Firewall problem
>
>
> I have set my firewall to
>
> firewall_type="open"
> firewall_enable="YES"
>
> and when I want to drop a specific IP, I enter it manually,
> it accepts it,
> but it does not drop the packets..
>
> I am getting a lot of virus activity on my SMTP port 25. So I
> wanted to
> drop a few IP ranges/addresses..
>
> 00100 62054 5483792 allow ip from any to any via lo0
> 00200 0 0 deny ip from any to 127.0.0.0/8
> 00300 0 0 deny ip from 127.0.0.0/8 to any
> 65000 873327 293931424 allow ip from any to any
> 65100 0 0 deny tcp from 24.92.226.153 to any
> 65110 0 0 deny ip from 213.191.102.86 to any
> 65535 0 0 deny ip from any to any
>
> Yet, checking later in my SMTP logs, I am still getting pounded by the
> listed addresses. Can anyone explain why this isn't working?
>
> Thanks,
>
> --
> Gary
> _______________________________________________
> freebsd-questions at freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to
> "freebsd-questions-unsubscribe at freebsd.org"
>
More information about the freebsd-questions
mailing list