How to open ports on FreeBSD firewall? 1

[Mateo1041]

Greetings,

Our organization recently installed eTrust Antivirus on our Windows NT 4.0 based system. However, it is unable to automatically download new virus signatures due to ports 2021 and 1024 probably not being open on our FreeBSD firewall.

I must admit I'm new to ports and firewalls. What would be the easiest and more efficient way to open these two ports on our FreeBSD firewall? I've heard something about an IPTable? I can navigate ok in Linux and know some things, but I'm by no means an expert.

Any nudge in the right direction would be much appreciated. I've scoured the web yesterday and it perhaps made me more confused than I was before.

- Matt.

 

[JaybOt]

Hi m8,

Try checking the firewall log for entries with your servers IP address (/var/log/ipfw.log i think), type ..

#ipfw show - to see the current state of the firewall, to add rules use the following format ..

#ipfw add allow ip from <HOST> to any 2021 via any
#ipfw add allow ip from <HOST> to any 1024 via any

the <HOST> bit should be replaced with your NT servers IP. The above rules should do what you want (allow traffic in/out for <HOST>), although it wouldn't hurt to read the man pages! (man ipfw) .. And there is loads of info already in the net, just search for IPFW.

Good luck,
J@yb0t

&quot;Always know what you say, but don't always say what you know!&quot;

 

[Mateo1041]

Thanks! That was extremely helpful and gives me a great start.

Unfortunately, it appears the organization I work for no longer knows the root password (I've only been on board here for a few months). I need this before changing port settings.

I hear there is an easy procedure you can follow, but it requires rebooting the FreeBSD server (our firewall). If our GroupWise email and Internet access depends on our firewall, would we experience any negative remifications aside from a small Internet downtime? If all configuration settings would remain the same, I may just have to go ahead and try this.

- Matt.

 

[carvin5string]

Rebooting should be no problem. The question is - what services are started automatically or not (if any)? IF whatever needs to run (if anything) is started automatically then no problem, just reboot the box.

You need to reboot into single user mode to change the root password.

--
Chip