Correct syntax for ipfw to allow local traffic?

Vitali Malicky life at
Wed Aug 27 04:48:55 PDT 2003

> Hi all,

> I have
> 00100 allow ip from any to any via lo0
> in my firewall script. But although I get lines like
> silakka /kernel: Connection attempt to TCP from
> into my messages log. It is jsst like the firewall although blocks local
> traffic. What should I add or modify to allow traffic via loopback and/or
> from and to ?

 /sbin/ipfw -q add 00001 allow ip from to via lo0


I usually configure tyhe firewall in /etc/rc.firewall.

when I modify firewall rules on the remote servers I responsible of, first I
make a copy of rc.firewall, say, and make all necessary
changes in _this_ file, then  I run "shutdown -r +5min" and only after that
I execute /etc/
# /etc/ nohup &
if it's alright and I'm still there on the server I just kill the shutdown
process, if not, the machine reboots with the old rules...

Best of luck!

> Regards,
> Johan Paul
> _______________________________________________
> freebsd-questions at mailing list
> To unsubscribe, send any mail to
"freebsd-questions-unsubscribe at"

More information about the freebsd-questions mailing list