Re: firewall rules for bitlord, yahoo, limewire

2008-11-30 Thread Norberto Meijome
On Thu, 27 Nov 2008 12:07:50 +0100 (CET) Wojciech Puchar [EMAIL PROTECTED] wrote: Yeah. Limewire is written in Java (iirc), which makes it extremely easy to port it to any system that can run java. for P2P sharing rtorrent (/usr/ports/net-p2p/rtorrent) works excellent if you only want

Re: firewall rules for bitlord, yahoo, limewire

2008-11-30 Thread Norberto Meijome
On Wed, 26 Nov 2008 23:25:21 -0600 Andrew Gould [EMAIL PROTECTED] wrote: The Limewire website says it has versions for Windows, Mac OS X, Linux and others, including OS/2 and Solaris. furthermore, you can just download the source and make it run from within Eclipse (with some tweaks regarding

Re: firewall rules for bitlord, yahoo, limewire

2008-11-27 Thread Wojciech Puchar
because historically ISPs used those ports for throttling. +1 . skype does the same thing. and it's p2p too , although a lot less so than limewire. well ther are excellent method to block skype when using HTTP proxy not NAT ;) (skype can do through proxy)

Re: firewall rules for bitlord, yahoo, limewire

2008-11-27 Thread Wojciech Puchar
Yeah. Limewire is written in Java (iirc), which makes it extremely easy to port it to any system that can run java. for P2P sharing rtorrent (/usr/ports/net-p2p/rtorrent) works excellent ___ freebsd-questions@freebsd.org mailing list

Re: firewall rules for bitlord, yahoo, limewire

2008-11-26 Thread eculp
Fbsd1 [EMAIL PROTECTED] escribió: These applications have predefined ports they use to start up the bi-directional packet conversation. But them unsolicited packeted come in from other pc nodes to share data using a wide range of high port numbers. IPFW, IPF, and PF don't seem to have a

Re: firewall rules for bitlord, yahoo, limewire

2008-11-26 Thread RW
On Wed, 26 Nov 2008 21:40:27 +0800 Fbsd1 [EMAIL PROTECTED] wrote: I have inclusive firewall rule set which means only packets matching the rules are passed through. The inbound hight port numbers are blocked by design. How do other firewall users code rules to allow limewire to work? I

Re: firewall rules for bitlord, yahoo, limewire

2008-11-26 Thread Andrew Gould
On Wed, Nov 26, 2008 at 8:13 AM, [EMAIL PROTECTED] wrote: Hmmm. Isn't life interesting. I would like to know how to block them and others without causing strange secondary problems. Actually a default pf configuration will let them pass unless I'm forgetting something important. ed I

Re: firewall rules for bitlord, yahoo, limewire

2008-11-26 Thread eculp
Andrew Gould [EMAIL PROTECTED] escribió: On Wed, Nov 26, 2008 at 8:13 AM, [EMAIL PROTECTED] wrote: Hmmm. Isn't life interesting. I would like to know how to block them and others without causing strange secondary problems. Actually a default pf configuration will let them pass unless I'm

Re: firewall rules for bitlord, yahoo, limewire

2008-11-26 Thread Wojciech Puchar
sorry for asking but what are this limewire programs are? ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: firewall rules for bitlord, yahoo, limewire

2008-11-26 Thread Andrew Gould
On Wed, Nov 26, 2008 at 10:42 AM, Wojciech Puchar [EMAIL PROTECTED] wrote: sorry for asking but what are this limewire programs are? My unofficial take on it is that limewire is a peer-to-peer sharing application used by Windows, Mac OS X and Linux users to share files, usually music, often

Re: firewall rules for bitlord, yahoo, limewire

2008-11-26 Thread Lowell Gilbert
[EMAIL PROTECTED] writes: Andrew Gould [EMAIL PROTECTED] escribió: On Wed, Nov 26, 2008 at 8:13 AM, [EMAIL PROTECTED] wrote: Hmmm. Isn't life interesting. I would like to know how to block them and others without causing strange secondary problems. Actually a default pf configuration

Re: firewall rules for bitlord, yahoo, limewire

2008-11-26 Thread dick hoogendijk
On Wed, 26 Nov 2008 10:54:43 -0600 Andrew Gould [EMAIL PROTECTED] wrote: On Wed, Nov 26, 2008 at 10:42 AM, Wojciech Puchar [EMAIL PROTECTED] wrote: sorry for asking but what are this limewire programs are? My unofficial take on it is that limewire is a peer-to-peer sharing

Re: firewall rules for bitlord, yahoo, limewire

2008-11-26 Thread RW
On Wed, 26 Nov 2008 10:54:43 -0600 Andrew Gould [EMAIL PROTECTED] wrote: On Wed, Nov 26, 2008 at 10:42 AM, Wojciech Puchar [EMAIL PROTECTED] wrote: sorry for asking but what are this limewire programs are? My unofficial take on it is that limewire is a peer-to-peer sharing

Re: firewall rules for bitlord, yahoo, limewire

2008-11-26 Thread Ott Köstner
dick hoogendijk wrote: I know, I'm cynical here, but limewire is not all bad! ...and, BTW, Limewire port is readily available for FreeBSD: http://cvsweb.freebsd.org/ports/net-p2p/limewire LimeWire is a fast, easy-to-use file sharing program that contains no spyware, adware or other

Re: firewall rules for bitlord, yahoo, limewire

2008-11-26 Thread Wojciech Puchar
My unofficial take on it is that limewire is a peer-to-peer sharing application used by Windows, Mac OS X and Linux users to share files, usually music, often copyrighted, over the internet. It is one of the fastest, most effective ways to spread viruses, trojans, spyware, etc. that's my

Re: firewall rules for bitlord, yahoo, limewire

2008-11-26 Thread Wojciech Puchar
When people ask my advice about computers, I always include: Never use Limewire, or anything like it. just downloading/sharing files allows you to download viruses, but it's up to you to run them. well unless P2P program is really broken, or you are sharing executables. for sharing movies,

Re: firewall rules for bitlord, yahoo, limewire

2008-11-26 Thread Fbsd1
dick hoogendijk wrote: My unofficial take on it is that limewire is a peer-to-peer sharing application used by Windows, Mac OS X and Linux users to share files, usually music, often copyrighted, over the internet. It is one of the fastest, most effective ways to spread viruses, trojans,

Re: firewall rules for bitlord, yahoo, limewire

2008-11-26 Thread Norberto Meijome
On Wed, 26 Nov 2008 09:28:49 -0600 Andrew Gould [EMAIL PROTECTED] wrote: When the last culprit get's his computer back, he will find it running an operating system that is not supported by Limewire. DOS 6.0 ? :P it's java... The next time, he'll get it back without a network card. ouch,

Re: firewall rules for bitlord, yahoo, limewire

2008-11-26 Thread Norberto Meijome
On Wed, 26 Nov 2008 18:52:16 + RW [EMAIL PROTECTED] wrote: [..] It is one of the fastest, most effective ways to spread viruses, trojans, spyware, etc. The program does not use fixed ports, so the services are hard to block. In essence, the program gets the user to bypass

Re: firewall rules for bitlord, yahoo, limewire

2008-11-26 Thread Michael Powell
Fbsd1 wrote: [snip] Limewire is a windows only application. So how can you say it runs on solaris which is a flavor Unix? Limewire is a Java program. It will run on any platform which has a working Java run time environment installed. It is definitely not Windows only. -Jason

Re: firewall rules for bitlord, yahoo, limewire

2008-11-26 Thread Norberto Meijome
On Wed, 26 Nov 2008 21:40:27 +0800 Fbsd1 [EMAIL PROTECTED] wrote: I have inclusive firewall rule set which means only packets matching the rules are passed through. The inbound hight port numbers are blocked by design. How do other firewall users code rules to allow limewire to work? Hi, i

Re: firewall rules for bitlord, yahoo, limewire

2008-11-26 Thread Andrew Gould
On Wed, Nov 26, 2008 at 6:40 PM, Fbsd1 [EMAIL PROTECTED] wrote: dick hoogendijk wrote: My unofficial take on it is that limewire is a peer-to-peer sharing application used by Windows, Mac OS X and Linux users to share files, usually music, often copyrighted, over the internet. It is one

Re: firewall rules for bitlord, yahoo, limewire

2008-11-26 Thread APseudoUtopia
On Thu, Nov 27, 2008 at 12:25 AM, Andrew Gould [EMAIL PROTECTED] wrote: On Wed, Nov 26, 2008 at 6:40 PM, Fbsd1 [EMAIL PROTECTED] wrote: dick hoogendijk wrote: My unofficial take on it is that limewire is a peer-to-peer sharing application used by Windows, Mac OS X and Linux users to share

Re: Firewall rules / Proper directory

2007-08-03 Thread Tuc at T-B-O-H.NET
I've made a /etc/rc.firewall.local I may rename it in the future to stand out more, but we'll see how it goes for now. Neat. Have fun with the new firewall ruleset then. Thanks. I wish it wasn't necessary, but the server runs MySQL and if I turn TCPwrappers on, someone just

Re: Firewall rules / Proper directory

2007-08-03 Thread Giorgos Keramidas
On 2007-08-02 14:49, Tuc at T-B-O-H.NET [EMAIL PROTECTED] wrote: Giorgos Keramidas wrote: On 2007-08-02 12:36, Tuc at T-B-O-H.NET [EMAIL PROTECTED] wrote: Hi, I'm developing firewall rules for a machine, and I'm wondering what the standard is for putting my version of an ipfw firewall_script?

Re: Firewall rules / Proper directory

2007-08-02 Thread RW
On Thu, 2 Aug 2007 12:36:51 -0400 (EDT) Tuc at T-B-O-H.NET [EMAIL PROTECTED] wrote: Hi, I'm developing firewall rules for a machine, and I'm wondering what the standard is for putting my version of an ipfw firewall_script? I'd normally drop it onto /usr/local/etc somewhere,

Re: Firewall rules / Proper directory

2007-08-02 Thread Giorgos Keramidas
On 2007-08-02 12:36, Tuc at T-B-O-H.NET [EMAIL PROTECTED] wrote: Hi, I'm developing firewall rules for a machine, and I'm wondering what the standard is for putting my version of an ipfw firewall_script? I usually save my rules in '/etc/pf.conf' or '/etc/ipfw.rules'. It's not like the '/etc'

Re: Firewall rules / Proper directory

2007-08-02 Thread Tuc at T-B-O-H.NET
On 2007-08-02 12:36, Tuc at T-B-O-H.NET [EMAIL PROTECTED] wrote: Hi, I'm developing firewall rules for a machine, and I'm wondering what the standard is for putting my version of an ipfw firewall_script? I usually save my rules in '/etc/pf.conf' or '/etc/ipfw.rules'. It's not like

Re: Firewall rules for local lan

2004-07-11 Thread cpghost
Gaspar Kiraly wrote: I am in the process of setting up ipfw for my server and a small LAN of two pcs. The FreeBSD server is used as an internet gateway with a dial up connection (ppp -auto -alias demand). My network connection is working fine, however I am getting more and more junk mail lately.

RE: Firewall rules for local lan

2004-07-11 Thread JJB
Here is a rewrite of the FreeBSD handbook firewall section with examples that will answer all your questions. www.a1poweruser.com/FBSD_firewall/ -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Gaspar Kiraly Sent: Sunday, July 11, 2004 8:52 AM To: [EMAIL

Re: Firewall rules

2004-06-20 Thread Alex de Kruijff
On Wed, Jun 16, 2004 at 01:32:58AM +0100, Robert Downes wrote: JJB wrote: Fundamentally his keep-state rules work and yours don't. I have used his script exactly, modifying only for the differences in my ISP's addresses. Everything works as before, and still the check-state rule is

Re: Firewall rules

2004-06-15 Thread Giorgos Keramidas
On 2004-06-15 20:54, Robert Downes [EMAIL PROTECTED] wrote: I'm obviously missing something... su-2.05b# ipfw -a list 00100 16 1144 divert 8668 ip from any to any in via rl0 00200 17 964 divert 8668 ip from any to any out via rl0 00300 0 0 check-state 00400 32 3296 allow ip

Re: Firewall rules

2004-06-15 Thread Robert Downes
JJB wrote: First indication is the hit count on the check-state rule. It's zero which means there is never an match in the keep-state table. For all practical purposes your firewall keep-state rules are useless. I was suspicious of that too, but if I remove the keep-state option from the allow

Re: Firewall rules

2004-06-15 Thread Robert Downes
JJB wrote: Fundamentally his keep-state rules work and yours don't. I have used his script exactly, modifying only for the differences in my ISP's addresses. Everything works as before, and still the check-state rule is showing zero packets and zero bytes, even though keep-state rules have been

Re: Firewall rules

2004-06-15 Thread Giorgos Keramidas
On 2004-06-15 23:29, Giorgos Keramidas [EMAIL PROTECTED] wrote: On 2004-06-15 20:54, Robert Downes [EMAIL PROTECTED] wrote: I'm obviously missing something... su-2.05b# ipfw -a list 00100 16 1144 divert 8668 ip from any to any in via rl0 00200 17 964 divert 8668 ip from any to any out

Re: firewall rules error

2004-04-16 Thread RazorOnFreeBSD
Whatever the rules I'm using I get this message when booting and starting ipfw : ipfw: bad arguments, for usage summary ipfw except if I use the /etc/rc.firewall file but that's another I don't know why? it doesn't work with the SIMPLE argument in /etc/rc.conf and modified with the right values.

Re: firewall rules for mail gateway

2004-03-09 Thread Kevin D. Kinsey, DaleCo, S.P.
Mike Jackson wrote: Hi, I have a 5.2.1 firewall box that also has a mailserver. Goal: - firewall can send and receive mail - rest of the world - firewall can send and receive mail - internal LAN machines - firewall blocks internal LAN machines from connecting to external SMTP servers

Re: firewall rules for mail gateway

2004-03-09 Thread Mike Jackson
Kevin D. Kinsey, DaleCo, S.P. ([EMAIL PROTECTED]) wrote: So, you're using ipf or ipfilter, not ipfw, as I take it from your syntax. # ipfilter logging ipmon_enable=yes ipmon_flags=-D /var/log/ipflog I imagine the ipfilter gurus on the list would like to see your entire ruleset. I had to

Re: firewall rules for mail gateway

2004-03-09 Thread Mike Jackson
Kevin D. Kinsey, DaleCo, S.P. ([EMAIL PROTECTED]) wrote: have something to do with it. If the machine is running NAT/divert whatever, it might well be diverting before blocking? But I'm wrong so often it's not very funny ... and I use ipfw instead of ipf. One last thing, I forgot to

Re: Firewall rules for ftp

2004-02-14 Thread Martin Schweizer
Hello Here are my ftp rules: [snip # FTP ipfw add allow tcp from any to any 20 keep-state ipfw add allow tcp from any to any 21 keep-state ipfw add allow tcp from any 20 to me 1024-49151 keep-state # aktives FTP ipfw add allow tcp from any 20 to 192.168.1.1/24 1024-49151 keep-state ipfw add

RE: Firewall rules for ftp

2004-02-13 Thread JJB
It would help if you posted you ipfw rules file so people can review them to look for your problem. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Martin Schweizer Sent: Friday, February 13, 2004 2:07 AM To: [EMAIL PROTECTED] Subject: Firewall rules for ftp

Re: firewall rules do not get read

2003-11-21 Thread Alex de Kruijff
On Thu, Nov 20, 2003 at 04:19:09PM -0800, Chip wrote: Alex de Kruijff wrote: On Wed, Nov 19, 2003 at 09:38:34PM -0800, Chip wrote: I noticed my firewall rules are not being read. I have rc.conf set to read the file rc.firewall. In rc.firewall the first line is add divert natd etc

Re: firewall rules do not get read

2003-11-21 Thread Micheal Patterson
- Original Message - From: Alex de Kruijff [EMAIL PROTECTED] To: Chip [EMAIL PROTECTED] Cc: FreeBSD Questions List [EMAIL PROTECTED] Sent: Friday, November 21, 2003 1:24 PM Subject: Re: firewall rules do not get read On Thu, Nov 20, 2003 at 04:19:09PM -0800, Chip wrote: Alex de

Re: firewall rules do not get read

2003-11-20 Thread Ruben de Groot
On Wed, Nov 19, 2003 at 09:38:34PM -0800, Chip typed: I noticed my firewall rules are not being read. I have rc.conf set to read the file rc.firewall. In rc.firewall the first line is add divert natd etc etc. that is followed by pass all from any to any etc etc. Then nothing after that is

Re: firewall rules do not get read

2003-11-20 Thread Alex de Kruijff
On Wed, Nov 19, 2003 at 09:38:34PM -0800, Chip wrote: I noticed my firewall rules are not being read. I have rc.conf set to read the file rc.firewall. In rc.firewall the first line is add divert natd etc etc. that is followed by pass all from any to any etc etc. Then nothing after that is

Re: firewall rules do not get read

2003-11-20 Thread Chip
Alex de Kruijff wrote: On Wed, Nov 19, 2003 at 09:38:34PM -0800, Chip wrote: I noticed my firewall rules are not being read. I have rc.conf set to read the file rc.firewall. In rc.firewall the first line is add divert natd etc etc. that is followed by pass all from any to any etc etc. Then

Re: Firewall rules

2003-10-23 Thread Petre Bandac
www.kgb.ro/Ipfw-HOWTO HTH, petre On Wednesday 22 October 2003 18:05 Anno Domini, fbsd_user wrote using one of his keyboards: The FBSD handbook gives the idea that IPFW is the only firewall. FBSD also comes with ipfilter which is much easier to use and sertup. Google the questions archives

Re: Firewall rules

2003-10-23 Thread Richard Coleman
Do a quick google search on building freebsd firewall. I was building a FreeBSD firewall this week, and several of these sites were very helpful. There are sites for both ipfilter and ipfw. So, take your pick. I'm using ipfilter, but either firewall method will be sufficient for most

RE: Firewall rules

2003-10-22 Thread fbsd_user
The FBSD handbook gives the idea that IPFW is the only firewall. FBSD also comes with ipfilter which is much easier to use and sertup. Google the questions archives for loads of info about configuring ipfilter. You will be glade you did. -Original Message- From: [EMAIL PROTECTED]

Re: Firewall rules for servers, UDP

2003-08-20 Thread Chuck Swiger
Lucas Holt wrote: My problem lies in UDP rules. I think I have TCP figured out. My first attempt blocked off DNS queries from the machine outward. I could query the DNS server, but apps could not do lookups. i figure it has something to do with ports above 1024, but I'm not sure how to

Re: Firewall rules for servers, UDP

2003-08-19 Thread Alex de Kruijff
On Tue, Aug 19, 2003 at 02:31:55PM -0400, Lucas Holt wrote: I want to setup a firewall (ipfw) on my freebsd 4.8 p3 server. The machine runs web, ftp, ssh, dns, smtp, and imap to the outside world. Does anyone have any links to example rules for servers? (I've already looked at the

Re: Firewall rules for servers, UDP

2003-08-19 Thread Alex de Kruijff
On Tue, Aug 19, 2003 at 09:29:13PM +0200, Alex de Kruijff wrote: On Tue, Aug 19, 2003 at 02:31:55PM -0400, Lucas Holt wrote: I want to setup a firewall (ipfw) on my freebsd 4.8 p3 server. The machine runs web, ftp, ssh, dns, smtp, and imap to the outside world. Does anyone have any