Re: ipfw subnetting

2012-06-15 Thread Wojciech Puchar
can anyone suggest what i'm doing wrong here. Desired:drop everything from 180.0.0.0 to 180.255.255.255 ipfw -q add 137 deny all from 180.0.0.0/8 to any nothing wrong. all is fine. ___ freebsd-questions@freebsd.org mailing list

ipfw subnetting

2012-05-21 Thread Paul Macdonald
Hi, can anyone suggest what i'm doing wrong here. Desired:drop everything from 180.0.0.0 to 180.255.255.255 ipfw -q add 137 deny all from 180.0.0.0/8 to any thanks Paul. -- - Paul Macdonald IFDNRG Ltd Web and video hosting - t: 0131

Re: ipfw subnetting

2012-05-21 Thread Ian Smith
In freebsd-questions Digest, Vol 416, Issue 1, Message: 26 On Mon, 21 May 2012 10:06:12 +0100 Paul Macdonald p...@ifdnrg.com wrote: can anyone suggest what i'm doing wrong here. Desired:drop everything from 180.0.0.0 to 180.255.255.255 ipfw -q add 137 deny all from 180.0.0.0/8 to

Re: ipfw subnetting

2012-05-21 Thread Paul Macdonald
On 21/05/2012 14:50, Ian Smith wrote: In freebsd-questions Digest, Vol 416, Issue 1, Message: 26 On Mon, 21 May 2012 10:06:12 +0100 Paul Macdonaldp...@ifdnrg.com wrote: can anyone suggest what i'm doing wrong here. Desired:drop everything from 180.0.0.0 to 180.255.255.255

Re: ipfw subnetting

2012-05-21 Thread Michael Sierchio
On Mon, May 21, 2012 at 8:30 AM, Paul Macdonald p...@ifdnrg.com wrote: A very open firewall test script is as follows: 00010 allow ip from any to any via lo0 00081 deny log ip from 180.0.0.0/8 to any 00100 check-state You don't need the following 00101 allow tcp from any to any established

Re: ipfw subnetting

2012-05-21 Thread Paul Macdonald
On 21/05/2012 16:44, Michael Sierchio wrote: On Mon, May 21, 2012 at 8:30 AM, Paul Macdonaldp...@ifdnrg.com wrote: A very open firewall test script is as follows: 00010 allow ip from any to any via lo0 00081 deny log ip from 180.0.0.0/8 to any 00100 check-state You don't need the following

Re: ipfw subnetting

2012-05-21 Thread Michael Powell
Paul Macdonald wrote: [snip] It has been many years since I used IPFW as I moved on to IPFILTER, and then on to PF which is what I use now. I don't even recall exactly why I chose to utilize both setting directionality of flow per specific interface. I suspect that somehow there is some rule

Re: ipfw subnetting

2012-05-21 Thread Ian Smith
On Mon, 21 May 2012 16:30:59 +0100, Paul Macdonald wrote: On 21/05/2012 14:50, Ian Smith wrote: In freebsd-questions Digest, Vol 416, Issue 1, Message: 26 On Mon, 21 May 2012 10:06:12 +0100 Paul Macdonaldp...@ifdnrg.com wrote: can anyone suggest what i'm doing wrong here.

Re: ipfw subnetting

2012-05-21 Thread Paul Macdonald
On 21/05/2012 17:01, Paul Macdonald wrote: On 21/05/2012 16:44, Michael Sierchio wrote: On Mon, May 21, 2012 at 8:30 AM, Paul Macdonaldp...@ifdnrg.com wrote: A very open firewall test script is as follows: this is now resolved, i hadn't realised (embarrassingly) that ipfw list will show

Re: ipfw subnetting

2012-05-21 Thread Michael Sierchio
On Mon, May 21, 2012 at 10:19 AM, Paul Macdonald p...@ifdnrg.com wrote: this is now resolved, i hadn't realised (embarrassingly) that ipfw list will show rules if if the fw is disabled. You should consider using tables, which allow you to add ad hoc nets, etc. and you can swap rulesets