Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [ipfw]

IPFW is is a native firewall built into FreeBSD.

IPFW is a stateful firewall included in the basic FreeBSD install as a kernel loadable module and supports both IPv4 and IPv6. It is comprised of several components: the kernel firewall filter rule processor and its integrated packet accounting facility, the logging facility, NAT, the dummynet(4) traffic shaper, a forward facility, a bridge facility, and an ipstealth facility.

59 questions
2
votes
2 answers

Block IP addresses with ipfw

I'm a total noob to ipfw so my apologies in advance if my questions are basic, but I've not found any resources for it that help with the gap between using the GUI and knowing the commandline ipfw really well. I'd like to block ips that are hitting…
ian
  • 239
  • 2
  • 4
  • 12
2
votes
1 answer

Showing ipfw configured pipes

Using ipfw I'm configuring pipes, but not actually adding/binding them to a port. For example: ipfw pipe 1 config bw 100KByte/s ipfw pipe 2 config bw 200KByte/s Above I've configured pipes 1 and 2 if not mistaken. Unfortunately, if I run: ipfw pipe…
Ben Truyman
  • 21
  • 2
1
vote
3 answers

Does PF support divert like IPFW?

I'm currently using IPFW on 3 dedicated firewall servers, and I would like to convert them to PF for some of its functionalities, but I need divert to work. Specifically I am teeing packets to a custom application for network analysis purposes. Is…
Massimiliano Torromeo
  • 291
  • 4
  • 12
1
vote
0 answers

iptables NAT not being applied to packets coming from dummynet

I have a setup where I have multiple interface aliases (with private IPs) for the primary network interface (eth0). eth0 Link encap:Ethernet HWaddr 0a:ed:01:17:53:b4 inet addr:10.0.1.220 Bcast:10.0.1.255 …
Suever
  • 111
  • 4
1
vote
1 answer

IPFW denies ssl connections

I'm having an issues loading https websites (google, facebook, amazon) through my PHP scripts using functions like fsockopen, file_get_contents. Operation is being timed out. So I started looking through my system settings and noticed that when ipfw…
Cyclone
  • 260
  • 1
  • 6
  • 20
1
vote
0 answers

Simple anti DDoS protection in FreeBSD

I have a lot of request from data centers to my web server on FreeBSD and sometimes it've have a lot of performance problem with my web projects. Adding to IPFW list all IP's data centers is impossible. I don't want to use a large Anti-DDoS systems,…
Yevhen L.
  • 11
  • 4
1
vote
2 answers

FreeBSD Traffic Shaping

I'm trying to do traffic shaping with FreeBSD, here are my rules su-3.2# ipfw show | grep pipe 08380 1514852 125523804 pipe 1 tcp from any to any dst-port 80 su-3.2# ipfw pipe 1 show 00001: 2.000 Mbit/s 0 ms 50 sl. 1 queues (1 buckets)…
alexus
  • 13,112
  • 32
  • 117
  • 174
1
vote
1 answer

Limit Connections Per IP Windows 2008 R2 x64

Hello I have been searching for a solution to this, what I want to accomplish is the ability for me to define firewall rules that will limit the amount of connections to certain ports from the same source IP address, I looked into WIPFW but it is no…
Upperfoot
  • 11
  • 1
  • 2
1
vote
1 answer

Mac OS X Firewall isn't firewalling

Rather confused by the results I'm getting on a Mac OS X Server running 10.8. I have an app that is running a web server on port 8000, which I want to be visible only to localhost. This seems perfectly suited for the GUI OS X firewall, but after…
Jeff Porten
  • 131
  • 4
1
vote
1 answer

FreeBSD jail with IPFW with loopback - unable to connect loopback interface

I am trying to configure a one IP jail with loopback interface, but I am unsure how to configure the IPFW rules to allow traffic to pass between the jail and the network card on the server. I have followed…
khinester
  • 203
  • 1
  • 9
1
vote
0 answers

Check-state counter is always zero

My firewall rules are: 00010 660 73050 allow ip from any to any via lo0 00011 0 0 deny ip from any to 127.0.0.0/8 00012 0 0 deny ip from 127.0.0.0/8 to any 00013 0 0 check-state 00100 …
akond
  • 111
  • 3
1
vote
1 answer

Simulating latency to a URL using ipfw

How can I simulate latency to a single URL? I tried following to simulate latency to a single URL by adding a ipfw rule. sudo ipfw add pipe 1 ip from myurl.com to any #(response of running above command) 00100 pipe 1 ip from any to any sudo ipfw…
user199801
  • 11
  • 1
1
vote
0 answers

Restrict "open" ethernet traffic to OpenVPN Traffic only when on a certain network

I would like to set up a pf or ipfw firewall rule on my Mac OS X 10.8 notebooks so that all Traffic on wireless and cabled networks is restricted to calling "home" through OpenVPN when I'm not in the office. In other (simpler/more mine) words: As…
user178954
  • 11
  • 1
1
vote
0 answers

Local transparent proxy with ipfw and squid

I want to use a local transparent proxy to have a single place to enter the password to an office proxy. Basically, all the TCP packets sent to port 80 except the ones sent to specific subnet should be forwarded to local Squid. Squid works fine in…
synapse
  • 499
  • 2
  • 6
  • 14
1
vote
2 answers

Port forwarding in Mountain Lion

This HAS to be something that can be done. I've searched and found many answers that claim to do what I want, but I can't seem to put it together. So... I am running a Linux virtual machine under Mountain Lion. The VM runs Apache. I need to redirect…
Chris Ostmo
  • 113
  • 1
  • 8
1
2
3 4