IPFW rules

SigmaX asdf fydernix at gmail.com
Mon Aug 21 15:43:01 UTC 2006


I'm trying to setup IPFW to block all ports except those I specify.
For starters I'm just opening SSH.

# ipfw list
00050 divert 8668 ip4 from any to any via rl0
00100 allow ip from any to any via lo0
00200 deny ip from any to 127.0.0.0/8
00300 deny ip from 127.0.0.0/8 to any
00301 allow log tcp from any to any dst-port 22
00399 deny ip from any to any
65000 allow ip from any to any
65535 deny ip from any to any

Traffic is still blocked on port 22 -- I can't login via SSH.  What am
I doing wrong, and what rule should I be using to allow SSH in and
through?

SigmaX


More information about the freebsd-stable mailing list