Subject: ipf problem
To: None <netbsd-users@netbsd.org>
From: Torsten Sadowski <moehl@akaflieg.extern.tu-berlin.de>
List: netbsd-users
Date: 09/13/2004 22:41:03
My router works fine so far with all computer except the router being able
to access the internet. The puzzling effect is, that the router can't
access the world (to get the time). When I try to ping something I get
ping: sendto: permission denied

The kernel is compiled with default block. What might be missing from my
ipf.conf to allow localhost traffic?

Torsten

block in		on ippp0
block in log	quick	on ippp0 from 192.168.0.0/16 to any
block in        quick   on ippp0 from 172.16.0.0/12 to any
block in        quick   on ippp0 from 10.0.0.0/8 to any
block in        quick   on ippp0 from 127.0.0.0/8 to any
block in        quick   on ippp0 from 0.0.0.0/8 to any
block in        quick   on ippp0 from 169.254.0.0/16 to any
block in        quick   on ippp0 from 192.0.2.0/24 to any
block in        quick   on ippp0 from 204.152.64.0/23 to any
block in        quick   on ippp0 from 224.0.0.0/3 to any
block in log	quick	on ippp0 from any to 192.168.1.1/32
block in log    quick   on ippp0 from any to 192.168.1.0/32
block in log    quick   on ippp0 from any to 192.168.1.255/32
block in log	quick	on ippp0 from any to 192.168.1.0/24
block out		on ippp0
pass out 	quick	on ippp0 proto tcp/udp  from 192.168.1.0/8 to any
keep state
pass out	quick	on ippp0 proto icmp	from 192.168.1.0/8 to any
keep state
pass out	quick	on ippp0 proto tcp/udp	from 127.0.0.1/32 to any
keep state
pass out	quick	on ippp0 proto icmp	from 127.0.0.1/32 to any
keep state
pass in			on fxp0 from any to any
pass out		on fxp0 from any to any
pass in			on lo0	from any to any
pass out 		on lo0	from any to any