Re: IPF Prob

["Saad Kadhi (Tech Accnt)" <bsdguy@noos.fr>]

Hi Ken,

Ken wrote:

> Rules lower int he list take precidence over rules higher in the
> list... so the 'block in on dc0 any to any' at the bottom of the list over
> rides the 'pass in quick on dc0 from any to any port = 20' at the top of
> the list. man ipf(8) and see /usr/share/ipf/example.* for more information 
Are you sure about that ? I thought that the 'quick' keyword bypass this 
sort of behavior and when a rule matches with 'quick', ipf stops 
processing the remaining rules ...

Saad.

> 
> -Ken
> 
> ---
> "Lie, Damned Lies, And Micro$oft Press Releases" - Tilda, From TechTV
> 
> On Thu, 1 Feb 2001, Alex Le Fevre wrote:
> 
> 
>> I've got a 2.8 box set up at home providing NAT for a
>> few Windows users. My ruleset is as follows:
>> 
>> pass out quick on lo0
>> pass in quick on lo0
>> pass in quick on dc0 from any to any port = 20
>> pass in quick on dc0 from any to any port = 21
>> pass in quick on dc0 from any to any port = 22
>> pass in quick on dc0 from any to any port = 25
>> pass in quick on dc0 from any to any port = 43
>> pass in quick on dc0 from any to any port = 53
>> pass in quick on dc0 from any to any port = 80
>> pass in quick on dc0 from any to any port = 110
>> pass in quick on dc0 from any to any port = 443
>> pass in quick on dc0 from any to any port = 10000
>> pass in on dc0 from any to any
>> pass out quick on dc0 from any to any
>> 
>> The problem is, when I attempted to change the
>> second-to-last line to "block in quick on dc0 from any
>> to any", thus essentially denying anything not on the
>> above listed ports, nothing gets in at all. I'm
>> particularly confused by this, since it's almost
>> exactly like the example on the FAQ.
>> 
>> Can anyone tell me what I'm doing wrong?
>> 
>> Thanks,
>> Alex Le Fevre
>> 
>> __________________________________________________
>> Get personalized email addresses from Yahoo! Mail - only $35 
>> a year!  http://personal.mail.yahoo.com/
>> 


-- 
### Saad Kadhi -- Network & Security Engineer ###
\|/ ____ \|/
~@-/ oO \-@~
/_( \__/ )_\
    \__U_/