Hi all,
I'm using a statefull+in-kernel NAT ipfw setup.
With the command "ipfw -d show" I can see the list of static and dynamic
rules.
But how to display the dynamic in-kernel-NAT table and their timeout values
like with dynamic rules ?
Thanks,
___
fr
On Mon, Jan 5, 2015 at 1:28 PM, Willy Offermans
wrote:
> Hello Luigi and FreeBSD friends,
>
> I do top posting.
>
> So there might be a chance that someting slips through the firewall
> between the start of the firewall and after the bpf traffic of dhclient.
> Once the NIC is configured, traffic
I'm using a pretty simple configuration:
My rc.conf:
ifconfig_sis0="DHCP"
firewall_enable="YES"
firewall_logging="YES"
firewall_script="/etc/ipfw.rules"
My /etc/ipfw.rules:
#!/bin/sh
fwcmd="/sbin/ipfw -q".
${fwcmd} -f flush
${fwcmd} add pass ip from any to any via lo0
${fwcmd} add deny log ip fro
2011/9/30 Alexander Motin :
> Quick look on ipfw kernel sources shown sysctl controlling that:
> net.inet6.ip6.fw.deny_unknown_exthdrs. You may try set it to zero.
>
Thanks a lot's !
This solve the first problem: My IPv6 tunnel is permit again.
Need to found how to prevent the log message because
Hi list,
I've got 2 PPTP VPN tunnels (using net/mpd5) between 2 FreeBSD based
router (8.2-RELEASE-p3) :
One IPv6 tunnel (IPv6 end point addresses) and one IPv4 tunnel (IPv4
end points addresses), and would to try to enable IPFW between them.
I've first begin to enable IPFW in open mode, but as soo
