On Tue, 9 Sep 2003, luki wrote:

>    I'm trying to solve problem with 2nd OPT interface (ep0) which even
> has its rules defined in the firewall ruleset provide no ip filtering. I
> found in status page that something added following "pipe"
>
> =============== CUT HERE ==================
> ***** ipfw show *****
> 00100 216  74224 allow ip from XX.XX.80.1 to any
> 00200  55   5526 allow ip from any to XX.XX.80.1
> 00300 132   7920 pipe 1 ip from any to XX.XX.81.0/24 via ep0
> 00400 130   7800 pipe 2 ip from XX.XX.81.0/24 to any via ep0
> 65535 473 202634 allow ip from any to any
> =============== CUT HERE ==================
>
>  in my config but have no idea where to switch off such "option".
>
> It seems that subnet behind the interface has no restrictions.

ipfw is only used for the traffic shaper. Look for the output of ipfstat
-hio if you're interested in the filter rules.

- Manuel