OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: Re: NAT and /etc/rc.firewall
From: Giorgos Keramidas (keramidaceid.upatras.gr)
Date: Wed Apr 12 2000 - 21:29:52 CDT

On Wed, Apr 12, 2000 at 04:41:54PM -0700, Paul Mielke wrote:
> At 05:23 PM 4/12/00 -0700, Ron Smith wrote:
>
> ...
>
> For now, I would suggest that you try to diagnose the problem by
> either using "ipfw show" or by using the 'log' keyword on all the
> ipfw rules to figure out which rule is the one that is trashing your
> packets.
>
> For example, do the following:
>
> ipfw show > fw.stats.after
> do some operation that fails
> ipfw show > fw.stats.after

Of course this was meant to be:

        ipfw show > fw.stats.before
        do some operation that fails
        ipfw show > fw.stats.after

and then a simple diff should be enough to provide with information on
what rules were triggered:

        diff -u fw.stats.before fw.stats.after 

-- 
Giorgos Keramidas, < keramida  ceid . upatras . gr >
For my public pgp key: finger keramidadiogenis.ceid.upatras.gr
See the headers of this message for the key finger-print.

To Unsubscribe: send mail to majordomoFreeBSD.org
with "unsubscribe freebsd-security" in the body of the message