strange problem with ipfw and rc.conf

gahn ipfreak at yahoo.com
Thu Jan 26 16:29:44 PST 2006


Thanks for the comments.

My real problem is thta the rc.conf just won load the
rulesets when the system reboots. I have to do this
every time the system reboots: "sh /etc/ipfw.rules"


--- Oxygenshell <admin at oxygenshell.com> wrote:

> ipfw rules automatically default to deny
> You have to explicitly tell it to allow by default.
> (kernel setting)
> 
> 
> ----- Original Message ----- 
> From: "Arne Woerner" <arne_woerner at yahoo.com>
> To: "gahn" <ipfreak at yahoo.com>; "freebsd security" 
> <freebsd-security at freebsd.org>; "freebsd general
> questions" 
> <freebsd-questions at freebsd.org>
> Sent: Thursday, January 26, 2006 7:03 PM
> Subject: Re: strange problem with ipfw and rc.conf
> 
> 
> > --- gahn <ipfreak at yahoo.com> wrote:
> >> 65335 locking out everything). I have to do "sh
> >> /etc/ipfw.rules" in order to load the rulesets,
> once I
> >> did that, I can access the box from remote
> locations
> >>
> > Hmm...
> >
> > It helped me, to look at /etc/rc.firewall... There
> are some
> > comments, that might give u the right hints...
> >
> > Maybe firewall_enable should be YES?
> >
> > E. g. my /etc/rc.firewall.bartely file cannot be
> executed with
> > sh... But maybe I still did not understand ipfw...
> >
> > My /etc/rc.firewall.bartely contains rules like:
> > add pass log all from any to 47.11.42.42
> > add deny log all from any to any
> >
> > And in rc.conf my
> firewall_type=/etc/rc.firewall.bartleby
> >
> > And I use default firewall_script=/etc/rc.firewall
> >
> > -Arne
> >
> >
> > __________________________________________________
> > Do You Yahoo!?
> > Tired of spam?  Yahoo! Mail has the best spam
> protection around
> > http://mail.yahoo.com
> > _______________________________________________
> > freebsd-security at freebsd.org mailing list
> >
>
http://lists.freebsd.org/mailman/listinfo/freebsd-security
> > To unsubscribe, send any mail to 
> > "freebsd-security-unsubscribe at freebsd.org"
> >
> > 
> 
> 
> 


__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com 


More information about the freebsd-questions mailing list