Changeset 8339

Timestamp:

Aug 13, 2010, 5:13:20 PM (15 years ago)

Author:

richardvm

Message:

a couple applictions won't work without 'keep-state'

File:

• 2.0/nanobsd/nanobsd/files/etc/ipfw.sh (modified) (1 diff)

2.0/nanobsd/nanobsd/files/etc/ipfw.sh ¶

@@ -82 +82 @@
 
 # Allow anything originating from me
-${fwcmd} add 4001 allow ip from me to any
+${fwcmd} add 4001 allow ip from me to any keep-state
 
 # Allow on any interface
 # Allow SSH
-${fwcmd} add 5001 allow tcp from any to me 22
+${fwcmd} add 5001 allow tcp from any to me 22 keep-state
 
 # Allow on internal interface
 # DNS
-${fwcmd} add 6001 allow ip from any to me 53 via $internalif
+${fwcmd} add 6001 allow ip from any to me 53 via $internalif keep-state
 
 # NTP
-${fwcmd} add 6002 allow udp from any to me 123 via $internalif
+${fwcmd} add 6002 allow udp from any to me 123 via $internalif keep-state
 
 # Block anything else
 ${fwcmd} add 65000 deny ip from any to any
-