ipf out rule

Chris Knipe savage at savage.za.org
Sun May 1 15:54:04 PDT 2005


Hi,

Can anyone take a minute to just explain to me why ipf is blocking this...

ipf.rules:
# rl0 - Outgoing
pass out quick on rl0 proto tcp from x.x.x.120/29 to any flags S keep state 
keep frags
pass out quick on rl0 proto udp from x.x.x.120/29 to any keep state keep 
frags
pass out quick on rl0 proto icmp from x.x.x.120/29 to any keep state keep 
frags
block out log quick on rl0 all

ipftest:
opening rule file "ipf.new"
in on rl0 tcp 196.25.1.1,2210 x.x.x.122,22
input: in on rl0 tcp 196.25.1.1,2210 x.x.x.122,22
pass ip 40(20) 6 196.25.1.1,2210 > x.x.x.122,22
--------------
out on rl0 tcp x.x.x.122,22 196.25.1.1,2210
input: out on rl0 tcp x.x.x.122,22 196.25.1.1,2210
block ip 40(20) 6 x.x.x.122,22 > 196.25.1.1,2210

Thanks.


--
Chris.

I love deadlines. I especially love the whooshing sound they make as they 
fly by..." - Douglas Adams, 'Hitchhiker's Guide to the Galaxy' 



More information about the freebsd-questions mailing list