IPFW Firewall Rule

Odhiambo Washington odhiambo at gmail.com
Fri Apr 1 18:06:34 UTC 2016


On 1 April 2016 at 13:26, Carmel <carmel_ny at outlook.com> wrote:

> I have two laptops that I use when I travel. I need them to have access
> to my LDAP server. I tried configuring this in my IPFW firewall rules,
> but they fail:
>
> #!/bin/sh
> cmd="ipfw -q add"
> pif="em0"
>
> ## Lots of rules - truncated
>
> $cmd allow log tcp from any MAC "0C:54:A5:04:BA:DD" to me 389 in via $pif
> setup keep-state
> $cmd allow log tcp from any MAC "00:1A:A0:89:CA:EA" to me 389 in via $pif
> setup keep-state
>
> This is the error message repeated twice:
>
> ipfw: missing ``to''
>
> If I substitute an IP address and remove the "any MAC "address" it works
> fine. I got this example from a web search. Can anyone tell me what I
> am doing wrong?
>
>
Setup OpenVPN on your firewall and connect to it using self-signed certs.
Pretty easy!
MAC addresses will not work when you are roaming.



-- 
Best regards,
Odhiambo WASHINGTON,
Nairobi,KE
+254 7 3200 0004/+254 7 2274 3223
"Oh, the cruft."


More information about the freebsd-questions mailing list