Attachment 5932 Details for Bug 13769 – file.diff

[patch] file.diff

file.diff (text/plain), 1.40 KB, created by Gregory Bond on 1999-09-16 03:50:00 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Gregory Bond

Created: 1999-09-16 03:50:00 UTC

Size: 1.40 KB

patch

obsolete

>--- etc/rc.firewall.orig	Thu Sep 16 12:31:07 1999
>+++ etc/rc.firewall	Thu Sep 16 12:32:45 1999
>@@ -79,7 +79,7 @@
> 
> ############
> # Only in rare cases do you want to change these rules
>-$fwcmd add 100 pass all from any to any via lo0
>+$fwcmd add 150 pass all from any to any via lo0
> $fwcmd add 200 deny all from any to 127.0.0.0/8
> 
> 
>@@ -151,12 +151,12 @@
>     $fwcmd add deny all from ${onet}:${omask} to any in via ${iif}
> 
>     # Stop RFC1918 nets on the outside interface
>-    $fwcmd add deny all from 192.168.0.0:255.255.0.0 to any via ${oif}
>-    $fwcmd add deny all from any to 192.168.0.0:255.255.0.0 via ${oif}
>-    $fwcmd add deny all from 172.16.0.0:255.240.0.0 to any via ${oif}
>-    $fwcmd add deny all from any to 172.16.0.0:255.240.0.0 via ${oif}
>-    $fwcmd add deny all from 10.0.0.0:255.0.0.0 to any via ${oif}
>-    $fwcmd add deny all from any to 10.0.0.0:255.0.0.0 via ${oif}
>+    $fwcmd add deny all from 192.168.0.0:255.255.0.0 to any in via ${oif}
>+    $fwcmd add deny all from any to 192.168.0.0:255.255.0.0 out via ${oif}
>+    $fwcmd add deny all from 172.16.0.0:255.240.0.0 to any in via ${oif}
>+    $fwcmd add deny all from any to 172.16.0.0:255.240.0.0 out via ${oif}
>+    $fwcmd add deny all from 10.0.0.0:255.0.0.0 to any in via ${oif}
>+    $fwcmd add deny all from any to 10.0.0.0:255.0.0.0 out via ${oif}
> 
>     # Allow TCP through if setup succeeded
>     $fwcmd add pass tcp from any to any established

Actions: View | Diff

Attachments on bug 13769: 5932 | 5933