[FUGSPBR] regra ipfw

[FreeBSD Hack]

Sua primeira linha nao pode ser deny all from any to any!

deve ser a ultima, com as aberturas antes!

[]'s!


At 23:05 28/6/2003 -0300, you wrote:
>Olá amigos
>Estou querendo fazer umas regras de ipfw para que primeiramente tudo 
>esteja fechado de pois abro as portas conforme necessário, dessa forma, 
>mas não estou tento resultados
>
>/sbin/ipfw -fq  flush
>
>#Nega tudo de tudo para tudo
>#/sbin/ipfw add deny all from any to any
>
># desactiva a ping remoto do exterior para o interior e activa o
># ping remoto para o exterior(icmp tipo 8)
>/sbin/ipfw add allow icmp from me to any icmptypes 8
>/sbin/ipfw add deny icmp from any to any in icmptypes 8
>
>#Banda Porta 80
>#download
>/sbin/ipfw add pipe 2 tcp from any to any 80 in via lnc0
>/sbin/ipfw pipe 2 config bw 10Kbytes/s
>
>#upload banda porta 80
>/sbin/ipfw add pipe 1 tcp from any 80 to any out via lnc0
>/sbin/ipfw pipe 1 config bw 7Kbytes/s
>
>#upload banda porta 21(ftp)
>/sbin/ipfw add pipe 3 tcp from any 21 to any out via lnc0
>/sbin/ipfw pipe 3 config bw 2Kbytes/s
>
>#download banda porta 21
>/sbin/ipfw add pipe 4 tcp from any to any 80 in via lnc0
>/sbin/ipfw pipe 4 config bw 5Kbytes/s
>
>#Regras de Acesso
>#/sbin/ipfw add pass tcp from any to any 5432
>/sbin/ipfw add pass tcp from any 5432 to any established
>
>Alguma dica?
>Obrigado,
>Márcio
>_______________________________________________________________
>Sair da Lista: http://www2.fugspbr.org/mailman/listinfo/fugspbr
>Historico: http://www4.fugspbr.org/lista/html/FUG-BR/

---------------------------------------------
Leonardo Garcia
FreeBSD user since 2.1.5 (Long time ago)...
Windows sometimes is necessary, Linux NEVER.
My System NOW: FreeBSD 5.0, BeOS 5, QNX 6, SunOS (on Sun Ultra 2), WXP


_______________________________________________________________
Sair da Lista: http://www2.fugspbr.org/mailman/listinfo/fugspbr
Historico: http://www4.fugspbr.org/lista/html/FUG-BR/