Tagged Questions

The tag has no wiki summary.

learn more… | top users | synonyms

1
vote
0answers
26 views

Local transparent proxy with ipfw and squid

I want to use a local transparent proxy to have a single place to enter the password to an office proxy. Basically, all the TCP packets sent to port 80 except the ones sent to specific subnet should ...
0
votes
0answers
37 views

Allow HTTP traffic to a LAN PC through IPFW

I have a question, hope anybody can help me! My network schema is fairly simple: Internet -> Load balancer -> FreeBSD Firewall (use IPFW bridge, no assigned IP add) -> LAN From external ...
5
votes
1answer
187 views

FreeBSD Jail with Loopback IP, IPFW, and natd - Outbound connections fail from jail

I've got a FreeBSD 9.0 server. It has several jails, but they all have this same issue. They can not initiate connections to the outside world. They communicate with each other and the host fine. ...
1
vote
2answers
672 views

Port forwarding in Mountain Lion

This HAS to be something that can be done. I've searched and found many answers that claim to do what I want, but I can't seem to put it together. So... I am running a Linux virtual machine under ...
0
votes
1answer
147 views

Why do these ipfw delayed pipes have no effect?

I'm on OSX 10.7.5 and am attempting to add some latency to the connection to my personal domain with ipfw, using this article as a guide. Normal latency: > ping -c5 troutwine.us ...
0
votes
0answers
90 views

Translating this iptables command to ipfw [closed]

I need to do the following (but I'm on Mac OS X):- iptables -A INPUT -p tcp -s 123.456.789.0 --sport 1234 --tcp-flags RST RST -j DROP So I need to use pfctl (I think? As ipfw is apparently ...
0
votes
0answers
57 views

Closing an existing socket connection in OS X

I am trying to the robustness of my application and would like to close a connected socket in OS X without killing the application or the network connection(I want other sockets to stay open). Can I ...
2
votes
1answer
193 views

ipfw strange rules after reboot

I set this lines in my rc.conf: firewall_enable="YES" firewall_type="/etc/ipfw.rules" cat /etc/ipfw.rules add 02020 deny ip from table(10) to any add 02030 deny ip from table(11) to any ...
2
votes
1answer
320 views

OS X 10.8: redirecting locally initiated ssh connections to localhost:22

I need to hack the OS X pf to redirect all ssh connections from an user to this machine. I want, when doing $ ssh google.com to get the same results as with $ ssh localhost ie a connection to ...
0
votes
1answer
111 views

Server freeze on flushing ipfw

I got strange problem with ipfw on FreeBSD 8.2, the problem is when I'm trying to flush the ipfw , by the following command: /sbin/ipfw -q -f flush or /sbin/ipfw flush and then y My dedicated ...
0
votes
0answers
230 views

IPFW block users until restart

I have a problem: firewall is setted to protect from flooding, and this basically works, but there is a problem. It bans a users on some hosts, and the table does not get the data of ban. The feeling ...
0
votes
2answers
447 views

Redirecting port 80 requests to local web server with IPFW

I'm setting up a freebsd router and want certain IPs on my network to be forwarded to our local webserver if they make port 80 requests. An example would be - banned user tries to surf the web, but ...
1
vote
3answers
224 views

Will dropping only SYN packets improve or decrease firewall performance?

I'm setting ipfw, and the following was suggested to me: If I make the rule only to drop SYN packets for TCP, no connection could be established and the firewall won't even have to look at other ...
1
vote
1answer
168 views

ipfw not delaying requests on localhost (OS X)

I'm trying to add some latency to a connection to a webapp running on localhost:8080 (Tomcat). I've tried adding the following: sudo ipfw pipe 1 config delay 500ms sudo ipfw add 1 pipe 1 dst-port ...
2
votes
1answer
327 views

Traffic shaping with tc doesn't work for high delay and bandwidth

I'm using tc with kernel 2.6.38.8 for traffic shaping. Limit bandwidth works, adding delay works, but when shaping both bandwidth with delay, the achieved bandwidth is always much lower than the limit ...
3
votes
1answer
828 views

Why isn't ipfw correctly limiting the bandwidth?

I've played around with the ipfw command on a Mac and tried to limit the bandwidth to 1MBit/s. sudo ipfw add pipe 1 ip from any to me sudo ipfw pipe 1 config bw 1MBit/s These are the statements I'm ...
2
votes
1answer
189 views

IPFW settings to allow trusted client to connect to Mac (e.g., over ssh)

I have the following ipfw settings on my Mac OS X 10.4 Tiger: 00100 allow ip from any to 123.123.123.123 00110 allow tcp from any to 123.123.123.123 00120 allow udp from any to 123.123.123.123 00130 ...
1
vote
1answer
366 views

ipfw rule to forward all traffic through a local proxy

I want to set up a local http proxy for testing and stubbing apps that make external api calls over http. I'm not sure the best way to do this with ipfw, I want to run my proxy as a particular user, ...
0
votes
1answer
982 views

Setup a local bridged connection using VirtualBox

I'm trying to forward/masquarade some trafic from my guest CentOS6 (virtualbox with bridged connection). Host is OSX Lion. Here is my network layout: en1 - host iface address: 78.251.xx.yy ...
2
votes
1answer
465 views

Converting iptables command to ipfw

I am trying to convert code I made on ubuntu work with osx. I do not know how to convert the iptables commands to ipfw commands. Any help would be appreciated. Ubuntu Code: echo 1 > ...
1
vote
0answers
309 views

Freebsd, ipfw sched - config type = QFQ get frozen

I have some freebsd soft-router $uname -r 8.2-STABLE code for ipfw: pipe 50 config bw 70Mbit/s sched 50 config type QFQ queue 502 config sched 50 weight 1 mask dst-ip 0xffffffff queue 501 ...
2
votes
1answer
231 views

What is the difference between using ipfw and hosts.deny in terms of security?

I'm in the middle of securing an OSX server that is the target of hundreds of automated requests per second from Chinese, Russian and US servers (see: Recovering a server from being an open relay). ...
1
vote
1answer
119 views

Recovering a server from being an open relay

One of our Mac Pro machines running Apache was inadvertently acting as a forward proxy with a public IP, after some organisation proxy rules changed. Consequently it was discovered by spammers and ...
2
votes
1answer
159 views

ipfw - purpose of outgoing keep-state?

I'm looking over the ipfw rules for our webserver and it struck me that we use check/keep-state on all outgoing traffic. We only have a handful ports open in both directions. We dont have much ...
1
vote
2answers
2k views

Block IP addresses with ipfw

I'm a total noob to ipfw so my apologies in advance if my questions are basic, but I've not found any resources for it that help with the gap between using the GUI and knowing the commandline ipfw ...
0
votes
2answers
243 views

FreeBSD 4.7 missing IPFW - How do I install it?

I have two FreeBSD servers that are on 4.7. These are two older servers that were already configure and setup when I got here. Now that the original admins are gone, I've started looking a bit more at ...
0
votes
1answer
223 views

port forwarding to server outside dmz from one inside dmz

we are running mysql replication between a server outside dmz and one inside dmz, for this we need port forwarding. We have had it set up, but it recently stopped working. Just before we added a rule ...
0
votes
1answer
1k views

How to install ipfw / DummyNet on Ubuntu 10.10?

There seems to be a man page an ipfw but I can't find what package I have to install to use ipfw / DummyNet. Any hints?
1
vote
2answers
235 views

Snow Leopard Server on Macbook Pro

I currently use my MBP7,1 as my primary computer, running 10.6 and Win7. I would like to switch to OSX Server so I can have a bit more control over the network services and ipfw. is it possible to run ...
0
votes
1answer
528 views

Using NTPD on OpenBSD to get time from Linux using portforwarding

This is a rehash of another question, now that I understand things a bit better. I have the following network set up: NTP 10.21.3.169 | \______________ | \ ...
2
votes
2answers
4k views

how can I access a webserver running on my NATed VMware Fusion guest from the rest of the subnet?

I am not allowed to run my VMWare guest in bridged mode, and I want to somehow tunnel from an agreed port on the Mac's external network interface to the webserver running on the VMWare fusion guest. ...
2
votes
1answer
354 views

Showing ipfw configured pipes

Using ipfw I'm configuring pipes, but not actually adding/binding them to a port. For example: ipfw pipe 1 config bw 100KByte/s ipfw pipe 2 config bw 200KByte/s Above I've configured pipes 1 and 2 ...
1
vote
3answers
1k views

Transparent proxying leaves sockets with SYN_RCVD in MacOS X 10.6 Snow Leopard (and maybe FreeBSD)

I'm trying to create a transparent proxy on my MacOS machine in order to port the sshuttle ssh-based transproxy VPN from Linux. I think I almost have it working, but sadly, almost is not 100%. Short ...
0
votes
1answer
1k views

bandwidth throttle on OSX with IPFW for localhost

I have my localhost webiste on http://macintosh.local - 127.0.0.1 Testing my website also for IE on the same address in VMWare Fusion I tried some Apps from hanynet.com/applications/ like WaterRoof. ...
11
votes
4answers
17k views

iptables equivalent for mac os x

I want to forward requests from 192.168.99.100:80 to 127.0.0.1:8000. This is how I'd do it in linux using iptables: iptables -t nat -A OUTPUT -p tcp --dport 80 -d 192.168.99.100 -j DNAT ...
3
votes
2answers
4k views

How do I enable IP-forwarding in MacOS X?

What is the correct way to enable IP-forwarding in MacOS X? More specifically, what is the MacOS X command line quivalent of the following two Linux commands: echo 1 > ...
0
votes
3answers
921 views

Does PF support divert like IPFW?

I'm currently using IPFW on 3 dedicated firewall servers, and I would like to convert them to PF for some of its functionalities, but I need divert to work. Specifically I am teeing packets to a ...
1
vote
0answers
204 views

ip6fw error setsockopt(IPV6_FW_DEL): Invalid argument

The following errors are showing up in our logs Nov 9 00:10:03 SERVER_NAME com.apple.afctl[95112]: ip6fw: rule 7880: setsockopt(IPV6_FW_DEL): Invalid argument We have a script that blocks ...
1
vote
2answers
989 views

FreeBSD Traffic Shaping

I'm trying to do traffic shaping with FreeBSD, here are my rules su-3.2# ipfw show | grep pipe 08380 1514852 125523804 pipe 1 tcp from any to any dst-port 80 su-3.2# ipfw pipe 1 show 00001: 2.000 ...
2
votes
3answers
585 views

Mac OS X Firewall Configuration: what's the easiest way to do it?

On occasion I need to configure the firewall on OS X machines (10.5), and I've been trying to figure out the best (read: easy without sacrificing too much control) way to do it. So far it seems like ...