IPFW and whois lookup

[J65nko BSD]

On Fri, 7 Jan 2005 19:33:32 -0700, V Foulk <kaosent at kewd.com> wrote:
[snip]
> 
> # ipfw list
> 65535 allow ip from any to any
> 
> I did have more elaborate rule sets that worked great, with the
> exception of the whois/hostname lookups.
>
> 

$ grep whois /etc/services
whois           43/tcp          nicname

In pf the following rule would allow whois requests, initiated by
clients behind the firewall

pass out quick on xl0 proto tcp from any to any port = whois flags
S/SA modulate state

>
[snip]
>