IPFW - Revision history

Rampage at 20:49, 11 November 2009

2009-11-11T20:49:05Z

← Older revision		Revision as of 20:49, 11 November 2009
Line 12:		Line 12:
	Open a Terminal to run the following commands. This can be done from "Applications -> Utilities". Remembering to use the right User. It is important you use the exact syntax as indicated below.<br>		Open a Terminal to run the following commands. This can be done from "Applications -> Utilities". Remembering to use the right User. It is important you use the exact syntax as indicated below.<br>
	<span style="color:red">sudo ipfw add 00111 allow all from any to { 127.0.0.1 or hub.twofo.co.uk or 137.205.0.0/16 } uid dc keep-state</span><br>		<span style="color:red">sudo ipfw add 00111 allow all from any to { 127.0.0.1 or hub.twofo.co.uk or 137.205.0.0/16 } uid dc keep-state</span><br>
	<span style="color:red">sudo ipfw add 00112 drop ~~tcp~~ from any to { not 127.0.0.1 or not hub.twofo.co.uk or not 137.205.0.0/16 } uid dc</span><br>		<span style="color:red">sudo ipfw add 00112 drop all from any to { not 127.0.0.1 or not hub.twofo.co.uk or not 137.205.0.0/16 } uid dc</span><br>


Line 31:		Line 31:
	To delete the rules from the firewall simply run the following commands:<br>		To delete the rules from the firewall simply run the following commands:<br>
	<span style="color:red">sudo ipfw del 00111 allow all from any to { 127.0.0.1 or hub.twofo.co.uk or 137.205.0.0/16 } uid dc keep-state</span><br>		<span style="color:red">sudo ipfw del 00111 allow all from any to { 127.0.0.1 or hub.twofo.co.uk or 137.205.0.0/16 } uid dc keep-state</span><br>
	<span style="color:red">sudo ipfw del 00112 drop ~~tcp~~ from any to { not 127.0.0.1 or not hub.twofo.co.uk or not 137.205.0.0/16 } uid dc</span><br>		<span style="color:red">sudo ipfw del 00112 drop all from any to { not 127.0.0.1 or not hub.twofo.co.uk or not 137.205.0.0/16 } uid dc</span><br>


	NB. The rules should reset when you reboot, so you might have to reconfigure them after every reboot or script them to run at startup.		NB. The rules should reset when you reboot, so you might have to reconfigure them after every reboot or script them to run at startup.

Rampage at 20:37, 11 November 2009

2009-11-11T20:37:44Z

← Older revision		Revision as of 20:37, 11 November 2009
Line 10:		Line 10:
	Next we need to create the ipfw rules.		Next we need to create the ipfw rules.

	Open a Terminal to run the following commands. This can be done from "Applications -> Utilities". Remembering to use the right User.<br>		Open a Terminal to run the following commands. This can be done from "Applications -> Utilities". Remembering to use the right User. It is important you use the exact syntax as indicated below.<br>
	<span style="color:red">sudo ipfw add 00111 allow all from any to { 127.0.0.1 or hub.twofo.co.uk or 137.205.0.0/16 } uid dc keep-state</span><br>		<span style="color:red">sudo ipfw add 00111 allow all from any to { 127.0.0.1 or hub.twofo.co.uk or 137.205.0.0/16 } uid dc keep-state</span><br>
	<span style="color:red">sudo ipfw add 00112 drop tcp from any to { not 127.0.0.1 or not hub.twofo.co.uk or not 137.205.0.0/16 } uid dc</span><br>		<span style="color:red">sudo ipfw add 00112 drop tcp from any to { not 127.0.0.1 or not hub.twofo.co.uk or not 137.205.0.0/16 } uid dc</span><br>

Rampage at 20:36, 11 November 2009

2009-11-11T20:36:43Z

← Older revision		Revision as of 20:36, 11 November 2009
Line 29:		Line 29:


	To delete the rules from the firewall simply run the following commands:		To delete the rules from the firewall simply run the following commands:<br>
	<span style="color:red">sudo ipfw del 00111 allow all from any to { 127.0.0.1 or hub.twofo.co.uk or 137.205.0.0/16 } uid dc keep-state</span><br>		<span style="color:red">sudo ipfw del 00111 allow all from any to { 127.0.0.1 or hub.twofo.co.uk or 137.205.0.0/16 } uid dc keep-state</span><br>
	<span style="color:red">sudo ipfw del 00112 drop tcp from any to { not 127.0.0.1 or not hub.twofo.co.uk or not 137.205.0.0/16 } uid dc</span><br>		<span style="color:red">sudo ipfw del 00112 drop tcp from any to { not 127.0.0.1 or not hub.twofo.co.uk or not 137.205.0.0/16 } uid dc</span><br>


	NB. The rules should reset when you reboot, so you might have to reconfigure them after every reboot or script them to run at startup.		NB. The rules should reset when you reboot, so you might have to reconfigure them after every reboot or script them to run at startup.

Rampage at 20:35, 11 November 2009

2009-11-11T20:35:56Z

← Older revision		Revision as of 20:35, 11 November 2009
Line 11:		Line 11:

	Open a Terminal to run the following commands. This can be done from "Applications -> Utilities". Remembering to use the right User.<br>		Open a Terminal to run the following commands. This can be done from "Applications -> Utilities". Remembering to use the right User.<br>
	<span style="color:red">sudo ipfw add ~~111~~ allow ~~tcp~~ from any to 127.0.0.1 uid dc</span><br>		<span style="color:red">sudo ipfw add 00111 allow all from any to { 127.0.0.1 or hub.twofo.co.uk or 137.205.0.0/16 } uid dc keep-state</span><br>
	<span style="color:red">sudo ipfw add ~~112 allow~~ tcp from any to hub.twofo.co.uk ~~uid dc</span><br>~~		<span style="color:red">sudo ipfw add 00112 drop tcp from any to { not 127.0.0.1 or not hub.twofo.co.uk or not 137.205.0.0/16 } uid dc</span><br>
	~~<span style="color:red">sudo ipfw add 113 deny tcp from any to~~ not 137.205.0.0/16 uid dc</span><br>

	For these filters to work you have to run your client as the dc user		For these filters to work you have to run your client as the dc user
Line 29:		Line 29:


	NB. The rules should reset when you reboot, so you might have to reconfigure them after every reboot or script them to run at startup~~. Please confirm with somebody on the hub if the rules are persistent or reset at every reboot~~.		To delete the rules from the firewall simply run the following commands:
			<span style="color:red">sudo ipfw del 00111 allow all from any to { 127.0.0.1 or hub.twofo.co.uk or 137.205.0.0/16 } uid dc keep-state</span><br>
			<span style="color:red">sudo ipfw del 00112 drop tcp from any to { not 127.0.0.1 or not hub.twofo.co.uk or not 137.205.0.0/16 } uid dc</span><br>

			NB. The rules should reset when you reboot, so you might have to reconfigure them after every reboot or script them to run at startup.

Astropoint: New page: The first thing we need to do is create a user to run your DC++ client under. We do this because ipfw doesn't currently support filtering by program, but it does support filtering by user,...

2009-10-26T09:52:46Z

New page: The first thing we need to do is create a user to run your DC++ client under. We do this because ipfw doesn't currently support filtering by program, but it does support filtering by user,...

New page

The first thing we need to do is create a user to run your DC++ client under. We do this because ipfw doesn't currently support filtering by program, but it does support filtering by user, so we can create ipfw rules that apply only to a specific user and run your DC++ client as that user I'm using "dc" as my user, you can use whatever you want.

You can create a new user by doing the following 
Choose Apple menu > System Preferences and click Accounts 
If some settings are dimmed, click the lock icon and type an administrator name and password. 
Click Add (+) and type the user's name. 

Next we need to create the ipfw rules.

Open a Terminal to run the following commands. This can be done from "Applications -> Utilities". Remembering to use the right User. 
sudo ipfw add 111 allow tcp from any to 127.0.0.1 uid dc 
sudo ipfw add 112 allow tcp from any to hub.twofo.co.uk uid dc 
sudo ipfw add 113 deny tcp from any to not 137.205.0.0/16 uid dc 

For these filters to work you have to run your client as the dc user

You should now your client running as user dc and with external connections blocked. You will need the following line to enable access control for the user 'dc' 
xhost +si:localuser:dc 

To run an application as another user enter the following lines in terminal 
su dc

Enter the password that you gave the user dc when you created the user and finally run 
/Applications/ShakesPeer.app/Contents/MacOS/ShakesPeer & exit

NB. The rules should reset when you reboot, so you might have to reconfigure them after every reboot or script them to run at startup. Please confirm with somebody on the hub if the rules are persistent or reset at every reboot.