Hello I cannot get ipfilter to load any rules. When I type in the iptest command I receive the following output: <[EMAIL PROTECTED]># ipftest no rules loaded
I used the example found in the /usr/share/examples directory I am unable to load the firewall. I have tried to load the file though # ipf -Fa -f /etc/ipf.rules I have posted my configuration bellow Thank you Aaron Kernel #IPFILTER options IPFILTER options IPFILTER_LOG #options IPFILTER_DEFAULT_BLOCK /etc/rc.conf ipfilter_enable="YES" ipfilter_rules="/etc/ipf.rules" ipmon_enable="YES" ipmon_flags="-Dsn" ipnat_enable="YES" ipnat_rules="/etc/ipnat.rules" /etc/syslog.conf security.* /var/log/ipfilter.log security.info /var/log/firewall.info security.notice /var/log/firewall.notice security.warning /var/log/firewall.warning security.err /var/log/firewall.err /etc/ipf.rules (small excerpt)# Allow in standard www function because I have apache server pass in quick on dc0 proto tcp from any to any port = 80 flags S keep state pass in quick on dc0 proto udp from any to any port = 80 keep state # Allow access to the zope server 8080 pass in quick on dc0 proto tcp from any to any port = 8080 flags S keep state pass in quick on dc0 proto udp from any to any port = 8080 keep state # Allow in non-secure Telnet session from public Internet # labeled non-secure because ID/PW passed over public Internet as clear text. # Delete this sample group if you do not have telnet server enabled. #pass in quick on dc0 proto tcp from any to any port = 23 flags S keep state #pass in quick on dc0 porto udp from any to any port = 23 keep state # Allow in secure FTP, Telnet, and SCP from public Internet # This function is using SSH (secure shell) pass in quick on dc0 proto tcp from any to any port = 22 flags S keep state pass in quick on dc0 proto udp from any to any port = 22 keep state # Block and log only first occurrence of all remaining traffic # coming into the firewall. The logging of only the first # occurrence stops a .denial of service. attack targeted # at filling up your log file space. # This rule enforces the block all by default logic. block in log first quick on dc0 all _______________________________________________ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"