firewall

[Minion 84]

kernel: ipfw: add_dyn_rule: Cannot allocate rule
kernel: ipfw: ipfw_install_state: add parent failed

how to fix this?
 

My rules firewall:

Spoiler

#!/bin/sh
ipfw -q -f flush

cmd="ipfw -q add"
skip="skipto 800"
pif="vtnet0"

$cmd 005 allow all from any to any via lo0

$cmd 010 allow all from any to any via lo0

$cmd 014 divert natd ip from any to any in via $pif

$cmd 015 check-state

$cmd 070 $skip tcp from me to any out via $pif setup keep-state uid root

$cmd 080 $skip icmp from any to any out via $pif keep-state

$cmd 090 $skip tcp from any to any 37 out via $pif setup keep-state

$cmd 100 $skip tcp from any to any 119 out via $pif setup keep-state

$cmd 110 $skip tcp from any to any 75 out via $pif setup keep-state

$cmd 115 $skip tcp from any to any 1600 out via $pif setup keep-state

$cmd 120 $skip tcp from any to any 43 out via $pif setup keep-state

$cmd 130 $skip udp from any to any 123 out via $pif keep-state

#$cmd 140 $skip udp from any to any 123 out via $pif keep-state

# metin2 ch1 ports
$cmd 150 $skip tcp from any to any 11002 out via $pif setup keep-state
$cmd 160 $skip tcp from any to any 13000 out via $pif setup keep-state
$cmd 170 $skip tcp from any to any 13001 out via $pif setup keep-state
$cmd 180 $skip tcp from any to any 13099 out via $pif setup keep-state

$cmd 300 deny all from 192.168.0.0/16  to any in via $pif  #RFC 1918 private IP
$cmd 301 deny all from 172.16.0.0/12   to any in via $pif  #RFC 1918 private IP
$cmd 302 deny all from 10.0.0.0/8      to any in via $pif  #RFC 1918 private IP
$cmd 303 deny all from 127.0.0.0/8     to any in via $pif  #loopback
$cmd 304 deny all from 0.0.0.0/8       to any in via $pif  #loopback
$cmd 305 deny all from 169.254.0.0/16  to any in via $pif  #DHCP auto-config
$cmd 306 deny all from 192.0.2.0/24    to any in via $pif  #reserved for docs
$cmd 307 deny all from 204.152.64.0/23 to any in via $pif  #Sun cluster
$cmd 308 deny all from 224.0.0.0/3     to any in via $pif  #Class D & E multicast

$cmd 315 deny tcp from any to any 113 in via $pif

$cmd 320 deny tcp from any to any 137 in via $pif
$cmd 321 deny tcp from any to any 138 in via $pif
$cmd 322 deny tcp from any to any 139 in via $pif
$cmd 323 deny tcp from any to any 81 in via $pif

$cmd 330 deny all from any to any frag in via $pif

$cmd 332 deny tcp from any to any established in via $pif

$cmd 380 allow tcp from any to me 75 in via $pif setup limit src-addr 2

$cmd 385 allow tcp from any to me 1600 in via $pif setup limit src-addr 3

$cmd 386 $skip tcp from any to any 11002 in via $pif setup limit src-addr 5
$cmd 387 $skip tcp from any to any 13000 in via $pif setup limit src-addr 5
$cmd 388 $skip tcp from any to any 13001 in via $pif setup limit src-addr 5
$cmd 389 $skip tcp from any to any 13099 in via $pif setup limit src-addr 5

$cmd 400 deny log all from any to any in via $pif

$cmd 450 deny log all from any to any out via $pif

$cmd 800 divert natd ip from any to any out via $pif
$cmd 801 allow ip from any to any

$cmd 999 deny log all from any to any
 

 

[iltizio 286]

If you don't know this firewall you can install webmin to creates rules with gui.