Subject: ipf problem
To: None <netbsd-users@netbsd.org>
From: Torsten Sadowski <moehl@akaflieg.extern.tu-berlin.de>
List: netbsd-users
Date: 09/13/2004 22:41:03
My router works fine so far with all computer except the router being able
to access the internet. The puzzling effect is, that the router can't
access the world (to get the time). When I try to ping something I get
ping: sendto: permission denied
The kernel is compiled with default block. What might be missing from my
ipf.conf to allow localhost traffic?
Torsten
block in on ippp0
block in log quick on ippp0 from 192.168.0.0/16 to any
block in quick on ippp0 from 172.16.0.0/12 to any
block in quick on ippp0 from 10.0.0.0/8 to any
block in quick on ippp0 from 127.0.0.0/8 to any
block in quick on ippp0 from 0.0.0.0/8 to any
block in quick on ippp0 from 169.254.0.0/16 to any
block in quick on ippp0 from 192.0.2.0/24 to any
block in quick on ippp0 from 204.152.64.0/23 to any
block in quick on ippp0 from 224.0.0.0/3 to any
block in log quick on ippp0 from any to 192.168.1.1/32
block in log quick on ippp0 from any to 192.168.1.0/32
block in log quick on ippp0 from any to 192.168.1.255/32
block in log quick on ippp0 from any to 192.168.1.0/24
block out on ippp0
pass out quick on ippp0 proto tcp/udp from 192.168.1.0/8 to any
keep state
pass out quick on ippp0 proto icmp from 192.168.1.0/8 to any
keep state
pass out quick on ippp0 proto tcp/udp from 127.0.0.1/32 to any
keep state
pass out quick on ippp0 proto icmp from 127.0.0.1/32 to any
keep state
pass in on fxp0 from any to any
pass out on fxp0 from any to any
pass in on lo0 from any to any
pass out on lo0 from any to any