Problem with Google URLs not loading?

Randal Hicks rhicks41 at tampabay.rr.com
Wed Mar 5 22:51:45 PST 2008


>
> On the Mac that connects the wireless LAN to the rest of the LAN  
> and Internet:
>
>> 00010 0 0 divert 8668 ip from any to any via en0
>> 01000 0 0 allow ip from any to any via lo0
>> 01010 0 0 deny ip from any to 127.0.0.0/8
>> 01020 0 0 deny ip from 224.0.0.0/4 to any in
>> 01030 0 0 deny tcp from any to 224.0.0.0/4 in
>> 12300 0 0 allow tcp from any to any established
>> 12301 0 0 allow tcp from any to any out
>> 12302 0 0 allow tcp from any to any dst-port 22
>> 12302 0 0 allow udp from any to any dst-port 22
>> 12303 0 0 allow udp from any to any out keep-state
>> 12304 0 0 allow tcp from any to any dst-port 53 out keep-state
>> 12304 0 0 allow udp from any to any dst-port 53 out keep-state
>> 12305 0 0 allow udp from any to any in frag
>> 12306 0 0 allow tcp from any to any dst-port 311
>> 12307 0 0 allow tcp from any to any dst-port 625
>> 12308 0 0 allow udp from any to any dst-port 626
>> 12309 0 0 allow icmp from any to any icmptypes 8
>> 12310 0 0 allow icmp from any to any icmptypes 0
>> 12311 0 0 allow igmp from any to any
>> 65534 0 0 deny ip from any to any
>> 65535 0 0 allow ip from any to any
>
> Nothing looks specific enough for the Google problem.  Not sure  
> what the 224.0.0.0 is about but the rest looks pretty generic.
>
> And although our ADSL modem/router (Draytek 2600 Plus) does have  
> content filtering, and a firewall, nothing is on in the content  
> filtering and the firewall is normal(?).
>
> As mentioned, we also have no problems on the wired part of the LAN.
>
> Still bamboozled.
>
> Cheers,
> Ashley.
>

Hi Ashley,

Still bamboozled?

Your ipfw table shows all zeroed counters so it looks like you aren't  
even using ipfw.
224.0.0.0 entries deal with multicast -- Reasons for the deny is to  
prevent Denial Of Service attacks.

http://tools.ietf.org/html/draft-iana-special-ipv4-05
    224.0.0.0/4 - This block, formerly known as the Class D address
    space, is allocated for use in IPv4 multicast address assignments.
    The IANA guidelines for assignments from this space are described
    in [RFC3171].

Regards,
Randal









More information about the MacOSX-admin mailing list