1. J

    IPFW Ordering of ipfw rules and sets

    Hi, this is a question about the ordering of ipfw rules. As stated in the documentation ( https://www.freebsd.org/doc/handbook/firewalls-ipfw.html ), the ipfw command syntax is: CMD RULE_NUMBER set SET_NUMBER ACTION log LOG_AMOUNT PROTO from SRC SRC_PORT to DST DST_PORT OPTIONS Does the...
  2. J

    IPFW ipfw stateful ftp?

    Hi everyone, I'm new to this forum and I got into FreeBSD only a few weeks ago (I used Linux before that). I'm trying to set up a minimal firewall configuration for a remote computer. Here is the script in my /etc/ipfw.rules file. #!/usr/bin/env bash nic=`netstat -r | awk '/^default/ {print...
  3. A

    IPFW natd to ipfw nat

    Hello there, I just deployed simple private OpenVPN service by following instructions from: https://www.digitalocean.com/community/tutorials/how-to-configure-and-connect-to-a-private-openvpn-server-on-freebsd-10-1 Well, everything seems to be fine ... except I observed that 'natd' process...
  4. xoptov

    Solved ipfw0: That device doesn't support promiscuous mode

    Hello! I have very strange issue with ipfw0. My kernel has options IPFIREWALL and IPFIREWALL_VERBOSE but when I try listen ipfw0 interface see warning in my console: tcpdump: WARNING: ipfw0: That device doesn't support promiscuous mode (BIOCPROMISC: Invalid argument) What is I can fix for...
  5. AlexUnix

    IPFW IPFW Kernel NAT is not working

    Please help. I have version 10.2-RELEASE with kernel NAT configured. Ping request pass to external adapter, but don't route back to internal. Internal (ue1): # tcpdump -ni ue1 | grep tcpdump: verbose output suppressed, use -v or -vv for full protocol decode listening on ue1...
  6. B

    Solved Basic firewall config for a host

    Hello, everyone, and nice to meet you! I am new to FreeBSD (so fresh that I'm downloading the ISO as I write, that means I've never used FreeBSD before). I come from the Linux world and one of the first things I do when I install a distro, before going to update and configure it, is to set up...