Questions tagged [ipfw]
The ipfw tag has no usage guidance.
18
questions
2
votes
0answers
138 views
Setting up openvpn with a killswitch in a freebsd jail
I'm trying to setup a kill switch so that if OpenVPN becomes inactive all other connections will be blocked. I tried to adapt this Linux set up, but it doesn't seem to work on FreeBSD.
This is my ...
0
votes
0answers
28 views
How to use Webmin's BSD Firewall module on a DigitalOcean VPS?
I am running FreeBSD 12.1 on a DigitalOcean VPS (a "droplet") and want to use ipfw. The firewall itself seems to work, but Webmin's BSD Firewall module gives me the following error (Webmin ...
2
votes
1answer
138 views
History of programmatic interfaces to iptables, ipchains, and ipfw
I had to do some fiddling with iptables rules from Go recently, and I noticed both docker's and coreos's wrapper libraries exec() out to the iptables command and screen scrape the standard output. ...
0
votes
1answer
47 views
How to use interface name instead of IP addresss on IPFW?
add 04000 allow IP from 192.168.1.10 to ca-vancouver.privateinternetaccess.com keep-state
I want to change to epair0b because I want to avoid hardcoded IP address and I would like to use DHCP instead
...
2
votes
1answer
92 views
Blacklist IP file for `ipfw`?
My /etc/rc.firewall file contains the following additional lines created by me, with the purpose of banning attacker's DDoSers IPs:
${fwcmd} add deny ip from 122.228.19.80/24,\
...
2
votes
0answers
54 views
ipfw dummynet per ip fair traffic shaping
I want to shape traffic in such way, that no specific user could exhaust WAN connection that much so other users would be affected. I have ISP link with 100Mbits/s bandwidth and sometimes some users ...
1
vote
1answer
324 views
Does not write logs into /var/log/security after I modified this file
I run a script that modifies /var/log/security.
If someone tries to connect to my server via ssh, this event writes into /var/log/security.( I have set firewall_enable="YES" and firewall_logging="...
2
votes
2answers
931 views
Firewall ipfw in FreeBSD
I have a doubt respect to the functionality of the IPFW firewall in FreeBSD. My scenario is the following:
All these machines are running FreeBSD, and all of them are virtual machines. The thing is ...
0
votes
1answer
100 views
Incomplete documentation for FreeBSD ipfw
When I see the official documentation of ipfw or the man pages it seems that it is sometimes incomplete. Specifically, there are a lot of options like,
firewall_myservices
firewall_allowservices
...
1
vote
0answers
4k views
Installing Dummynet on Linux Ubuntu
I'm new to Ubuntu and I'm trying to install dummynet. I cannot however find a tutorial for Ubuntu. I've tried to follow this tutorial http://goo.gl/ZzKrpk however I get an error when making a kernel ...
0
votes
1answer
486 views
No buffer space available when using Dummynet in FreeBSD 9.3
As soon as the Dummynet Kernel module is loaded and the appropriate ipfw add pipe 1 from localhost to localhost command is issued, I can no longer ping localhost — I receive the ping: sendto: No ...
5
votes
3answers
3k views
Restart/reload IPFW remotely via ssh without losing connection
Is it possible to restart IPFW or reload its script remotely via ssh connection without loosing current connection?
2
votes
1answer
603 views
working netgraph configuration for ipfw and ng_bpf on FreeBSD
I'm trying to get a raw BPF bytecode packet filter working on FreeBSD using a combination of ipfw with ng_ipfw, ng_bpf and ng_tag.
However none of the documentation or presentations I can find ...
1
vote
1answer
418 views
FreeBSD equivalent of Linux's “xt_bpf” filtering module
In Linux 3.9 there's a packet filter module called xt_bpf that can take compiled BPF bytecode and use it directly in an iptables rule.
Is there any equivalent for FreeBSD's ipfw system?
2
votes
2answers
2k views
FreeBSD ipfw keepstate vs setup keep-state
A lot of examples where people are using keep-state with setup together. For example:
ipfw add 1 allow tcp from any to me 22 setup keep-state
Because of setup, this rule will allow only SYN packets, ...
3
votes
1answer
373 views
IPFW Port Forwarding
This is my situation: I want to connect to an OpenVPN server from my office (we're using a proxy, only ports 80 and 443 are allowed).
Server IP address is: 176.31.250.232:843
My static IP address is:...
2
votes
2answers
276 views
quick filter of IP that's causing sendmail DOS under FreeBSD
I've got what appears to be a malicious/spam host that is overloading my Sendmail server causing it to refuse connections to other hosts. I'm overloaded by connections from one particular IP address. ...
1
vote
1answer
191 views
ipfw on Mac OS X 10.8
I'm trying to setup local transparent proxy with ipfw and squid and ran into some problems. I have a single rule 00100 fwd 127.0.0.1,3128 log tcp from any to any dst-port 80 but it either gets into ...
