Questions tagged [ipfw]

IPFW is is a native firewall built into FreeBSD.

16 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
2 votes
1 answer
2k views

Showing ipfw configured pipes

Using ipfw I'm configuring pipes, but not actually adding/binding them to a port. For example: ipfw pipe 1 config bw 100KByte/s ipfw pipe 2 config bw 200KByte/s Above I've configured pipes 1 and 2 ...
Ben Truyman's user avatar
1 vote
0 answers
158 views

Equivalent ipfw config for firewalld

On a system managed by firewalld it is possible to redirect incoming traffic on 443 to 8443 so the process listening doesn't have to run as root to bind to 443 which requires root. firewall-cmd --add-...
washcloth's user avatar
  • 111
1 vote
0 answers
656 views

iptables NAT not being applied to packets coming from dummynet

I have a setup where I have multiple interface aliases (with private IPs) for the primary network interface (eth0). eth0 Link encap:Ethernet HWaddr 0a:ed:01:17:53:b4 inet addr:10.0....
Suever's user avatar
  • 111
1 vote
1 answer
126 views

Mac OS X Firewall isn't firewalling

Rather confused by the results I'm getting on a Mac OS X Server running 10.8. I have an app that is running a web server on port 8000, which I want to be visible only to localhost. This seems ...
Jeff Porten's user avatar
1 vote
0 answers
108 views

Check-state counter is always zero

My firewall rules are: 00010 660 73050 allow ip from any to any via lo0 00011 0 0 deny ip from any to 127.0.0.0/8 00012 0 0 deny ip from 127.0.0.0/8 to any ...
akond's user avatar
  • 111
1 vote
0 answers
101 views

Restrict "open" ethernet traffic to OpenVPN Traffic only when on a certain network

I would like to set up a pf or ipfw firewall rule on my Mac OS X 10.8 notebooks so that all Traffic on wireless and cabled networks is restricted to calling "home" through OpenVPN when I'm not in the ...
user178954's user avatar
1 vote
0 answers
2k views

Local transparent proxy with ipfw and squid

I want to use a local transparent proxy to have a single place to enter the password to an office proxy. Basically, all the TCP packets sent to port 80 except the ones sent to specific subnet should ...
synapse's user avatar
  • 499
1 vote
0 answers
1k views

Freebsd, ipfw sched - config type = QFQ get frozen

I have some freebsd soft-router $uname -r 8.2-STABLE code for ipfw: pipe 50 config bw 70Mbit/s sched 50 config type QFQ queue 502 config sched 50 weight 1 mask dst-ip 0xffffffff queue 501 ...
Korjavin Ivan's user avatar
1 vote
2 answers
257 views

Snow Leopard Server on Macbook Pro

I currently use my MBP7,1 as my primary computer, running 10.6 and Win7. I would like to switch to OSX Server so I can have a bit more control over the network services and ipfw. is it possible to run ...
neoice's user avatar
  • 884
0 votes
1 answer
243 views

FreebSD ipfw: using not with multiple addresses

Any ideas why this rule won't parse? ipfw add 10 deny ip from \{ not 127.0.0.1 and not 10.12.34.0/24 \} to any 53 out xmit wan0 ipfw doesn't like and and says: ipfw: missing ")" I've tried ...
pnadeau's user avatar
  • 143
0 votes
0 answers
84 views

After enable rules of ipfw my server collapsed

I enable ipfw rules on my mail server. After some time server collapsed. In /var/log/messages is nothing information of my damage. But when I connected monitor, I saw some troubles with swap ...
Artem Khmil's user avatar
0 votes
0 answers
122 views

ipfw not send mail to another domain

I configure ipfw for a local mail server. Everything works fine, but after a while (from one and a half days to a couple of hours) incorrect work is observed: mail from other domains comes, but mail ...
Artem Khmil's user avatar
0 votes
0 answers
399 views

ipfw blocks IPs not in table

FreeBSD this_server 10.3-RELEASE-p11 FreeBSD 10.3-RELEASE-p11 #0: Mon Oct 24 18:49:24 UTC 2016 IPFW seems to be full of ghosts for me. Here is an example. First the evidence of blocking with my IP ...
gariac's user avatar
  • 46
0 votes
1 answer
1k views

redirect IP on osx

On my Mac OS X (10.6.8) I'd like to make all requests for 111.111.111.111 go to 222.222.222.222 for all ports. To test this, I have a webserver at 222.222.222.222:80 which will respond with a page for ...
cherouvim's user avatar
  • 814
0 votes
1 answer
200 views

HTTPD dies on FreeBSD if multiple connenctions are open from same client

I've asked this question on StackOverflow, but nobody answered, until yesterday... and the answer was a suggestion... to ask this here :). So... can someone help me with this : I'm new in networking ...
user2602350's user avatar
-1 votes
1 answer
113 views

IPFW interface with special character

I'm new using FreeBSD and IPFW, but in my work we need to change from GNU/Linux, using IPtables, to FreeBSD and IPFW to packege filter. We have some rules in IPtables script that we need to put on ...
Kalil's user avatar
  • 7