ipfw

[Jose Hidalgo Herrera]

Why do you deny traffic from and to 127/8 ?
If you are worried about somebody using that addresses do this:

allow ip from any to any via lo0
deny log ip from 127/8 to any 
deny log ip from any to any 

and then:
allow ip from any to any


On Thu, 2004-06-10 at 16:09, El DaEm0n wrote:

> hi everyone im a newbie in IPFW i have a problem so i would explain you:
> 
> im running phpnuke in my webserver,
> 
> before, i can send mails automaticly from my server when the users  
> registered in the portal  using sendmail  ,but, after i installed of IPFW 
> does not leave the messages
> 
> this is my rules:
> 
> deny icmp from any to me icmptypes 8
> deny ip from any to 127.0.0.0/8
> deny ip from 127.0.0.0/8 to any
> allow ip from any to any
> deny ip from any to any
> 
> and i added this to my kernel
> 
> options RANDOM_IP_ID
> options TCP_DROP_SYNFIN
> options IPSTEALTH
> 
> can somedoby help me?? and tell how can fix this problem?
> thank´s
> 
> _________________________________________________________________
> Charla con tus amigos en línea mediante MSN Messenger:  
> http://messenger.microsoft.com/es
> 
> _______________________________________________
> freebsd-ipfw at freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw
> To unsubscribe, send any mail to "freebsd-ipfw-unsubscribe at freebsd.org"

0100101001001000
Jose Hidalgo.
Sr. IS Analyst/Sr. Unix® SysAdmin
T: +506.256.5021 x171
F: +506.256.4334
Toll free: 1.888.451.0125 x171
E: jose at hostarica.com
Hostarica - Managed Collocation
www.hostarica.com
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: This is a digitally signed message part
Url : http://lists.freebsd.org/pipermail/freebsd-ipfw/attachments/20040610/d4ac87c0/attachment.bin