Subject: Help with firewall Script
To: None <port-sparc64@netbsd.org>
From: Facundo Barrera <facubarrera@gmail.com>
List: port-sparc64
Date: 08/29/2006 09:30:50
Hi list:

Need help with this firewall script, its for a box running BIND, of
course i need SSH access too (of course tlp0 and lo0 are accurate):

**************************************************************************
##ipf.conf

## pass all local traffic

pass in quick on lo0 all
pass out quick on lo0 all


## block all inbound/outbound traffic that doesn't comply with rules below
## the first rule logs to the daemon.notice syslog event level
#block in log level daemon.notice all

block in all
block out all


## pass inbound echo request
pass in quick on tlp0 proto icmp from any to any icmp-type 8


## pass inbound identd requests
pass in quick on tlp0 proto tcp from any to any port = 113 flags S keep state


## pass inbound BIND
pass in quick on tlp0 proto tcp from any to any port = 53 flags S keep state

pass in quick on tlp0 proto udp from any to any port = 53 flags S keep state


## pass inbound SSH
pass in quick on tlp0 proto tcp from any to any port = 22 flags S keep state

## pass all outbound tcp, udp, icmp traffic with state
pass out quick on tlp0 proto tcp from any to any keep state keep frags
pass out quick on tlp0 proto udp from any to any keep state keep frags
pass out quick on tlp0 proto icmp from any to any keep state

*********************************************************************************

But when i run it,  it says i got an error on the second line of bind,
the UDP one, and then SSH to the box also stop working, please need
help with this, i dont got any experience with this sintax, i use
iptables most of the time on linux machines.

many thanks. Hope be clear


-- 
Facundo Agustin Barrera
IT Management.
Buenos Aires - Argentina.