Displaying 18 results from an estimated 18 matches for "ipfirewall_default_to_accept".
2004 Feb 06
0
FW: Out of Office AutoReply: IPFIREWALL_DEFAULT_TO_ACCEPT becomes def ault to deny
Sigh?
_____
Van: Sorisio, Chris [mailto:ChrisSorisio@PeakTechnical.com]
Verzonden: vrijdag 6 februari 2004 15:56
Aan: Gogh, Ruben van
Onderwerp: Out of Office AutoReply: IPFIREWALL_DEFAULT_TO_ACCEPT becomes def
ault to deny
I will be out of the office until February 9th, 2004. Please contact Paul
DeFloria at 412.825.4772 if you require an immediate response.
********************************************
The information in this e-mail is personal and may contain
confidentia...
2005 Feb 03
1
need ipfw clarification
...default to accept, logging limited to 5 packets/entry by default
On 5.2.1, I used to get this:
ipfw2 initialized, divert disabled, rule-based forwarding enabled,
default to accept, logging disabled
If both cases, I am adding this to my KERNEL config:
options IPFIREWALL
options IPFIREWALL_DEFAULT_TO_ACCEPT
It seems that the major difference between 5.2.1 and 5.3 is that now
rule-based forwarding is disabled.
Is this correct? And what exactly is rule-based forwarding? I'm guessing
that it doesn't really apply to my situation, as in these cases, I am
using IPFW to create a deny all inboun...
2004 Feb 06
2
IPFIREWALL_DEFAULT_TO_ACCEPT becomes default to deny
...;t complaining so, installed the kernel, reboot and there
it was:
>IP packet filtering initialized, divert disabled, rule-based forwarding
enabled, default to deny, logging disabled
Another rebuild didn't work out so... I reviewed /usr/src/UPDATING but
there's no such thing as dropping IPFIREWALL_DEFAULT_TO_ACCEPT.
So, is this a true bug or what?
Regards,
Ruben
********************************************
The information in this e-mail is personal and may contain
confidential and/or priveliged material. The contents may
not be disclosed or used by anyone other than the addressee....
2004 Mar 03
2
tripwire port broken?
Dear list!
I've tried to compile
tripwire-2.3.1-2 port on
my 5.2 release. Two diffe-
rent tarballs have failed
with message, that port
was broken, all in one
sentence. No any details.
Well! Makefile has so-
mething like:
.if ${OSVERSION} >= 500000
BROKEN= "Fails to build inder 5.X"
.endif
One more:
USE_GMAKE= yes
Has someone compiled
it successfully? Is it
for a good
2005 Jan 24
4
ftp problem
Hi all,
I'm just setup a new freebsd to be a ftp server.
ftp-ing from localhost was success, but when i was
trying to ftp from other ip, got result "Connection
closed by remote host."
Kernel already configure with firewall (with options
FIREWALL_DEFAULT_TO_ACCEPT). rc.conf file already
contain "firewall_type=open".
What could be the problem? I can seem to solve this
2003 Aug 03
0
Multiple kld loads?
....org/mailman/htdig/freebsd-stable/2003-July/002329.html
Thanks.
kernel is GENERIC plus the following:
-------------------------------------
options IPFIREWALL
options IPFIREWALL_VERBOSE
options IPFIREWALL_FORWARD
options IPFIREWALL_VERBOSE_LIMIT=100
options IPFIREWALL_DEFAULT_TO_ACCEPT
options IPDIVERT
options HZ=1000
options DUMMYNET
Dmesg follows:
--------------------------------------
bwm# dmesg
Copyright (c) 1992-2003 The FreeBSD Project.
Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
The Regents of the University of...
2004 Feb 19
2
traffic normalizer for ipfw?
Hi there,
Is there some way to configure ipfw to do traffic
normalizing ("scrubbing", as in ipf for OpenBSD)? Is
there any tool to do it for FreeBSD firewalling?
I've heard that ipf was ported on current, anything
else?
TIA,
/Dorin.
__________________________________
Do you Yahoo!?
Yahoo! Mail SpamGuard - Read only the mail you want.
http://antispam.yahoo.com/tools
2006 Jan 26
7
strange problem with ipfw and rc.conf
...mpd_enable="YES"
also my customized kernel (partial):
options IPFIREWALL
#firewall
options IPFIREWALL_VERBOSE
#enable logging to syslogd(8)
options IPFIREWALL_VERBOSE_LIMIT=10 #limit
verbosity
#options IPFIREWALL_DEFAULT_TO_ACCEPT #allow
everything by default
options IPFIREWALL_FORWARD
#packet destination changes
options IPFIREWALL_FORWARD_EXTENDED #all
packet dest changes
options IPDIVERT
#divert sockets
TIA
_______________________________________________...
2003 May 16
2
make installworld fails : touch not found ?
...# Multicast routing
options IPFIREWALL #firewall
options IPFIREWALL_VERBOSE #enable logging to syslogd(8)
options IPFIREWALL_FORWARD #enable transparent proxy support
options IPFIREWALL_VERBOSE_LIMIT=100 #limit verbosity
options IPFIREWALL_DEFAULT_TO_ACCEPT #allow everything by default
options IPV6FIREWALL #firewall for IPv6
options IPV6FIREWALL_VERBOSE
options IPV6FIREWALL_VERBOSE_LIMIT=100
options IPV6FIREWALL_DEFAULT_TO_ACCEPT
options IPDIVERT #divert sockets
options RAND...
2003 Jul 17
1
device troubles after stable update
...#Rate limit bad replies
options KBD_INSTALL_CDEV # install a CDEV entry in /dev
options USER_LDT #user LDT for WINE and nvidia
#IPSEC
options IPSEC
options IPSEC_ESP
#IPFW
options IPFIREWALL #firewall
options IPFIREWALL_DEFAULT_TO_ACCEPT #allow everything by default
#NAT
options IPDIVERT
device isa
device eisa
device pci
# Floppy drives
device fdc0 at isa? port IO_FD1 irq 6 drq 2
device fd0 at fdc0 drive 0
device fd1 at fdc0 drive 1
# ATA and ATAPI devi...
2003 Oct 02
8
upgrading 4.0 to stable
I'm still kind of hung up looking for some definitive answers on this issue.
Perhaps you guys can help me out?
Frank
Date: Mon, 29 Sep 2003 17:55:33 -0500 (CDT)
From: "F. Even" <freebsdlists@elitists.org>
Subject: re: upgrading 4.0 to stable
To: freebsd-questions@freebsd.org
Message-ID: <20030929225533.81D352FE@elitists.org>
Content-Type: text/plain; charset=iso-8859-1
2005 Apr 29
6
IPFW disconnections and resets
Hi,
I am using IPFW on FreeBSD 4.11
I am facing two problems:
- SSH sessions timeout after a while
- When I run "/sbin/ipfw -q -f flush" in the rules script all connection
get reset (and I am thrown out of the box).
Is this standard functioning of ipfw or do I need to change any
configuration?
Thanks,
Siddhartha
2003 Apr 10
0
panic: vinvalbuf: flush failed
...# Don't drop into DDB for a panic.
options KTRACE # Enable system-call tracing facility.
pseudo-device vlan 1 # VLAN support
pseudo-device stf # 6to4 IPv6 over IPv4 encapsulation
options IPFIREWALL
options IPFIREWALL_DEFAULT_TO_ACCEPT
options IPFW2 # Use next-generation IPFW.
options DUMMYNET
options IPFILTER
options IPFILTER_LOG
options DEVICE_POLLING
options HZ=1000
pseudo-device vn # Vnode driver, see vnconfig(8)
options MSGBUF_...
2003 Aug 13
6
5.1-R-p2 crashes on SMP with AMI RAID and Intel 1000/Pro
...#options NETGRAPH_TEE
#options NETGRAPH_TTY
#options NETGRAPH_UI
#options NETGRAPH_VJC
options MROUTING
options IPFIREWALL
options IPFIREWALL_VERBOSE
options IPFIREWALL_FORWARD
#options IPFIREWALL_VERBOSE_LIMIT=100
#options IPFIREWALL_DEFAULT_TO_ACCEPT
#options IPV6FIREWALL
#options IPV6FIREWALL_VERBOSE
#options IPV6FIREWALL_VERBOSE_LIMIT=100
#options IPV6FIREWALL_DEFAULT_TO_ACCEPT
options IPDIVERT
#options IPFILTER
#options IPFILTER_LOG
#options IPFILTER_DEFAULT_BLOCK
options IPSTE...
2012 Feb 10
21
Reducing the need to compile a custom kernel
Hi,
during some big discussions in the last monts on various lists, one of
the problems was that some people would like to use freebsd-update but
can't as they are using a custom kernel. With all the kernel modules
we provide, the need for a custom kernel should be small, but on the
other hand, we do not provide a small kernel-skeleton where you can
load just the modules you need.
2003 Aug 12
2
panic with today's stable
...PFIREWALL #firewall
options IPFW2 #firewall
options IPFIREWALL_VERBOSE #enable logging to syslogd(8)
options IPFIREWALL_FORWARD #enable transparent proxy support
options IPFIREWALL_VERBOSE_LIMIT=33100 #limit verbosity
options IPFIREWALL_DEFAULT_TO_ACCEPT #allow everything by default
options IPV6FIREWALL #firewall for IPv6
options IPV6FIREWALL_VERBOSE
options IPV6FIREWALL_VERBOSE_LIMIT=100
options IPDIVERT #divert sockets
options DDB
options DDB_UNATTENDED
options B...
2008 Nov 18
3
High system in %system load .
...Stop CPUS using NMI instead of IPI
options AUDIT # Security event auditing
options SMP # Symmetric MultiProcessor Kernel
options IPFIREWALL
options IPFIREWALL_VERBOSE
options IPFIREWALL_VERBOSE_LIMIT=5
options IPFIREWALL_DEFAULT_TO_ACCEPT
options QUOTA
device cpufreq
device acpi
device pci
device fdc
device ata
device atadisk # ATA disk drives
device ataraid # ATA RAID drives
device atapicd # ATAPI CDROM drives
options...
2012 Nov 13
1
thread taskq / unp_gc() using 100% cpu and stalling unix socket IPC
...C3 FreeBSD 9.1-RC3 #4 r242695: Wed Nov 7 11:33:17 UTC 2012 root at XY.hostpoint.ch:/usr/obj/usr/src/sys/HOSTPOINT amd64
kernconf:
----
include GENERIC
ident HOSTPOINT
# ipfw
options IPFIREWALL
options IPFIREWALL_VERBOSE
options IPFIREWALL_VERBOSE_LIMIT=5
options IPFIREWALL_DEFAULT_TO_ACCEPT
options IPFIREWALL_FORWARD
options IPDIVERT
# ddb for debugging and textdumps
options KDB # Enable kernel debugger support.
options DDB # Support DDB.
# dtrace
options KDTRACE_HOOKS # all architectures - enable general DT...