IPFW and HTTPS problem

[David Kelly]

On Aug 25, 2007, at 4:15 PM, Narek Gharibyan wrote:

> I enabled https for my webmail. It works for LAN client but doesn't  
> work for
> Internet clients. I checked with tcpdump ipfw filters the incomping  
> https
> packets unless the rule

tcpdump is the hard way.

# ipfw zero

try the webmail.

# ipfw -a list

Examine the above list for rules have been hit since zero. Your  
answer lies among the rules which have been hit.

You might add "ipfw add 65000 deny log ip from any to any" and see  
what shows in /var/log/security for more details.

If you see hits on a rule but don't understand why, add "log" to it.  
Probably best to duplicate that rule with a lower number so the "log"  
version is used first. And easy to remove the logging version later  
without touching the original.

--
David Kelly N4HHE, dkelly at HiWAAY.net
========================================================================
Whom computers would destroy, they must first drive mad.