Firewall rules: 00100 allow ip from any to any via lo0 00200 deny ip from any to 127.0.0.0/8 00300 deny ip from 127.0.0.0/8 to any 00400 allow ip from any to any MAC any any 00500 allow ip from 66.218.40.118 to any 00600 allow ip from any to 66.218.40.118 00700 allow tcp from any to any established 00800 allow ip from any to any frag 00900 allow tcp from any to 66.218.40.42 dst-port 25 setup 01000 allow tcp from any to 66.218.40.42 dst-port 22 setup 01100 allow tcp from any to 66.218.40.42 dst-port 115 01200 allow tcp from any to 66.218.40.42 dst-port 80 setup 01300 allow tcp from 66.218.40.42 to any setup 01400 allow tcp from 66.218.40.27 to any setup 01500 allow udp from 66.218.40.27 to any dst-port 53 keep-state 01600 allow udp from 66.218.40.42 to any dst-port 53 keep-state 01700 allow udp from 66.218.40.12 to any dst-port 53 keep-state 01800 allow udp from 66.218.40.27 to any dst-port 123 keep-state 01900 allow udp from 66.218.40.42 to any dst-port 123 keep-state 02000 allow udp from 66.218.40.12 to any dst-port 123 keep-state 02100 allow icmp from any to any icmptypes 8 keep-state 02200 allow icmp from any to any icmptypes 3 02300 allow icmp from any to any icmptypes 11 02400 deny log ip from any to any ======================== ======================== ======================== ======================== rkomorn@certainty:~$ pciconf -vl hostb0@pci0:0:0: class=0x060000 card=0x019d1028 chip=0x25708086 rev=0x02 hdr=0x00 vendor = 'Intel Corporation' device = '82865G/PE/P, 82848P DRAM Controller / Host-Hub Interface' class = bridge subclass = HOST-PCI agp0@pci0:2:0: class=0x030000 card=0x019d1028 chip=0x25728086 rev=0x02 hdr=0x00 vendor = 'Intel Corporation' device = '82865G Integrated Graphics Device' class = display subclass = VGA uhci0@pci0:29:0: class=0x0c0300 card=0x019d1028 chip=0x24d28086 rev=0x02 hdr=0x00 vendor = 'Intel Corporation' device = '82801EB/ER (ICH5/ICH5R) USB UHCI Controller #1' class = serial bus subclass = USB uhci1@pci0:29:1: class=0x0c0300 card=0x019d1028 chip=0x24d48086 rev=0x02 hdr=0x00 vendor = 'Intel Corporation' device = '82801EB/ER (ICH5/ICH5R) USB UHCI Controller #2' class = serial bus subclass = USB uhci2@pci0:29:3: class=0x0c0300 card=0x019d1028 chip=0x24de8086 rev=0x02 hdr=0x00 vendor = 'Intel Corporation' device = '82801EB/ER (ICH5/ICH5R) USB UHCI Controller #4' class = serial bus subclass = USB ehci0@pci0:29:7: class=0x0c0320 card=0x019d1028 chip=0x24dd8086 rev=0x02 hdr=0x00 vendor = 'Intel Corporation' device = '82801EB/ER (ICH5/ICH5R) USB 2.0 EHCI Controller' class = serial bus subclass = USB pcib1@pci0:30:0: class=0x060400 card=0x00000000 chip=0x244e8086 rev=0xc2 hdr=0x01 vendor = 'Intel Corporation' device = '82801BA/CA/DB/DBL/EB/ER/FB (ICH2/3/4/4/5/5/6), 6300ESB Hub Interface to PCI Bridge' class = bridge subclass = PCI-PCI isab0@pci0:31:0: class=0x060100 card=0x00000000 chip=0x24d08086 rev=0x02 hdr=0x00 vendor = 'Intel Corporation' device = '82801EB/ER (ICH5/ICH5R) LPC Interface Bridge' class = bridge subclass = PCI-ISA atapci0@pci0:31:1: class=0x01018a card=0x019d1028 chip=0x24db8086 rev=0x02 hdr=0x00 vendor = 'Intel Corporation' device = '82801EB/ER (ICH5/ICH5R) EIDE Controller' class = mass storage subclass = ATA none0@pci0:31:3: class=0x0c0500 card=0x019d1028 chip=0x24d38086 rev=0x02 hdr=0x00 vendor = 'Intel Corporation' device = '82801EB/ER (ICH5/ICH5R) SMBus Controller' class = serial bus subclass = SMBus xl0@pci1:1:0: class=0x020000 card=0x905510b7 chip=0x905510b7 rev=0x30 hdr=0x00 vendor = '3COM Corp, Networking Division' device = '3C905B-TX Fast Etherlink 10/100 PCI TX NIC' class = network subclass = ethernet fxp0@pci1:8:0: class=0x020000 card=0x019d1028 chip=0x10508086 rev=0x02 hdr=0x00 vendor = 'Intel Corporation' device = '82801EB/ER PRO/100 VE Network Connection' class = network subclass = ethernet ======================== ======================== ======================== ======================== rkomorn@certainty:~$ sysctl -a | grep bridge net.link.ether.bridge_cfg: fxp0:0,xl0:0 net.link.ether.bridge_ipfw: 1 net.link.ether.bridge_ipf: 0 net.link.ether.bridge.config: fxp0:0,xl0:0 net.link.ether.bridge.enable: 1 net.link.ether.bridge.predict: 318365 net.link.ether.bridge.dropped: 0 net.link.ether.bridge.packets: 465474 net.link.ether.bridge.ipfw_collisions: 0 net.link.ether.bridge.ipfw_drop: 0 net.link.ether.bridge.copy: 0 net.link.ether.bridge.ipfw: 1 net.link.ether.bridge.ipf: 0 net.link.ether.bridge.debug: 0 net.link.ether.bridge.version: 031224 ======================== ======================== ======================== ========================