Unix and Linux Stack Exchange
Unix and Linux Stack Exchange

Questions tagged [ipfw]

21 questions
5
votes
3 answers

Restart/reload IPFW remotely via ssh without losing connection

Is it possible to restart IPFW or reload its script remotely via ssh connection without loosing current connection?
b.mazgarov
  • 61
  • 1
  • 3
3
votes
1 answer

IPFW Port Forwarding

This is my situation: I want to connect to an OpenVPN server from my office (we're using a proxy, only ports 80 and 443 are allowed). Server IP address is: 176.31.250.232:843 My static IP address is: 192.168.78.241 Is possibile to forward the 843…
Zi0P4tch0
  • 31
  • 1
3
votes
1 answer

History of programmatic interfaces to iptables, ipchains, and ipfw

I had to do some fiddling with iptables rules from Go recently, and I noticed both docker's and coreos's wrapper libraries exec() out to the iptables command and screen scrape the standard output. This seemed surprising to me. In Python-land,…
joelanders
  • 31
  • 4
2
votes
2 answers

FreeBSD ipfw keepstate vs setup keep-state

A lot of examples where people are using keep-state with setup together. For example: ipfw add 1 allow tcp from any to me 22 setup keep-state Because of setup, this rule will allow only SYN packets, which are first packets in TCP handshake. OK.…
eytukan
  • 21
  • 1
  • 2
2
votes
2 answers

quick filter of IP that's causing sendmail DOS under FreeBSD

I've got what appears to be a malicious/spam host that is overloading my Sendmail server causing it to refuse connections to other hosts. I'm overloaded by connections from one particular IP address. This IP is blocked in /etc/access from us…
S.ov
  • 121
  • 1
2
votes
0 answers

Setting up openvpn with a killswitch in a freebsd jail

I'm trying to setup a kill switch so that if OpenVPN becomes inactive all other connections will be blocked. I tried to adapt this Linux set up, but it doesn't seem to work on FreeBSD. This is my openvpn.config group openvpn dev tun remote…
openVpnWannabe
  • 21
  • 1
2
votes
1 answer

Blacklist IP file for `ipfw`?

My /etc/rc.firewall file contains the following additional lines created by me, with the purpose of banning attacker's DDoSers IPs: ${fwcmd} add deny ip from 122.228.19.80/24,\ 185.234.219.65/24,\ …
Andreas
  • 21
  • 1
2
votes
0 answers

ipfw dummynet per ip fair traffic shaping

I want to shape traffic in such way, that no specific user could exhaust WAN connection that much so other users would be affected. I have ISP link with 100Mbits/s bandwidth and sometimes some users can exhaust it when they download something from…
Никита
  • 21
  • 1
2
votes
2 answers

Firewall ipfw in FreeBSD

I have a doubt respect to the functionality of the IPFW firewall in FreeBSD. My scenario is the following: All these machines are running FreeBSD, and all of them are virtual machines. The thing is that I don't understand one thing. If I add a rule…
victor26567
  • 121
  • 4
2
votes
1 answer

working netgraph configuration for ipfw and ng_bpf on FreeBSD

I'm trying to get a raw BPF bytecode packet filter working on FreeBSD using a combination of ipfw with ng_ipfw, ng_bpf and ng_tag. However none of the documentation or presentations I can find include any complete working examples. The ng_tag man…
Alnitak
  • 271
  • 1
  • 8
1
vote
1 answer

ipfw on Mac OS X 10.8

I'm trying to setup local transparent proxy with ipfw and squid and ran into some problems. I have a single rule 00100 fwd 127.0.0.1,3128 log tcp from any to any dst-port 80 but it either gets into infinite loop or doesn't work for some other…
synapse
  • 111
  • 2
1
vote
1 answer

Does not write logs into /var/log/security after I modified this file

I run a script that modifies /var/log/security. If someone tries to connect to my server via ssh, this event writes into /var/log/security.( I have set firewall_enable="YES" and firewall_logging="YES" in /etc.rc.conf) The script finds and marks…
Artem Khmil
  • 15
  • 4
1
vote
1 answer

Incomplete documentation for FreeBSD ipfw

When I see the official documentation of ipfw or the man pages it seems that it is sometimes incomplete. Specifically, there are a lot of options like, firewall_myservices firewall_allowservices etc., which can be found in many online guides but…
ahron
  • 394
  • 5
  • 20
1
vote
1 answer

FreeBSD equivalent of Linux's "xt_bpf" filtering module

In Linux 3.9 there's a packet filter module called xt_bpf that can take compiled BPF bytecode and use it directly in an iptables rule. Is there any equivalent for FreeBSD's ipfw system?
Alnitak
  • 271
  • 1
  • 8
1
vote
0 answers

Installing Dummynet on Linux Ubuntu

I'm new to Ubuntu and I'm trying to install dummynet. I cannot however find a tutorial for Ubuntu. I've tried to follow this tutorial http://goo.gl/ZzKrpk however I get an error when making a kernel path. $ make…
panther
  • 11
  • 1
  • 3
1
2