Firewall problem
Gary
gv-list-freebsdquestions at mygirlfriday.info
Wed Oct 1 11:18:20 PDT 2003
I have set my firewall to
firewall_type="open"
firewall_enable="YES"
and when I want to drop a specific IP, I enter it manually, it accepts it,
but it does not drop the packets..
I am getting a lot of virus activity on my SMTP port 25. So I wanted to
drop a few IP ranges/addresses..
00100 62054 5483792 allow ip from any to any via lo0
00200 0 0 deny ip from any to 127.0.0.0/8
00300 0 0 deny ip from 127.0.0.0/8 to any
65000 873327 293931424 allow ip from any to any
65100 0 0 deny tcp from 24.92.226.153 to any
65110 0 0 deny ip from 213.191.102.86 to any
65535 0 0 deny ip from any to any
Yet, checking later in my SMTP logs, I am still getting pounded by the
listed addresses. Can anyone explain why this isn't working?
Thanks,
--
Gary
More information about the freebsd-questions
mailing list