ipfw2 - too many dynamic rules

Stec John stecjohn2005 at mail.ws
Tue Oct 18 14:16:12 PDT 2005


I need some help with ipfw2 on my squid box 

I have too many dynamic rules errors for dns
Can I insert a dns static rule into my rules (as below) and how?

allow ip from any to any via lo0
allow ip from any to any via lo1
deny ip from any to 127.0.0.0/8
deny ip from 127.0.0.0/8 to any
check-state
allow ip from me to any keep-state
divert 8668 tcp from 202.4.48.0/22 to any dst-port 80
fwd 127.0.0.1,3128 tcp from 202.4.48.0/22 to any dst-port 80
allow ip from any to any
deny ip from any to any





More information about the freebsd-questions mailing list