Re: IPFW on OS X issues

[Chuck Swiger <chuck () codefab com>]

Rishi Pande wrote:
[ ... ]
> Jul 28 15:44:13 nom mach_kernel: ipfw: 7000 Deny UDP 
> 128.173.125.180:49807 239.255.255.253:427 in via en0
> Jul 28 15:44:13 nom mach_kernel: ipfw: 7000 Deny UDP 
> 128.173.201.44:49406 239.255.255.253:427 in via en0
>   
> The funny part is my machine is not 239.255.255.253. I have 
> installed the same firewall on different machines but they don't 
> seem to have any such problems.

OK; how do you want to handle this traffic?  You could continue to block SLP and 
not log these messages by removing the log keyword from the 7000 ruleset.

You could also do something like:

ipfw add 6999 pass udp from any to any 427

...on the hosts on your network; presumably, you would have a tighter ruleset on 
your Internet-bound firewall.

--
-Chuck


_______________________________________________
firewall-wizards mailing list
firewall-wizards () honor icsalabs com
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards