Re: [Fwbuilder-discussion] lo:127.0.0.1 being rejected by catch all rule

[Vadim K. <va...@vk...>]

On Feb 22, 2004, at 8:59 PM, Robert Warner wrote:

> Hi,
>
> My rule #6 is the catch all rule for denial.  Rule #4 indicates the 
> 127.0.0.1 (lo) can connect to 127.0.0.1 (lo).  This appeared to work 
> at one time.  Now i'm unable to make this connection.  Unfortunately 
> firefox needs this open for access.
>

rules that permit connections of the box to itself should be placed in 
the policy of the loopback interface ("lo"). That is, instead of 
putting a rule that permits source="lo" to destination="lo" in the 
global policy, you should put a rule that permits source="any" to 
destination="any" in the policy associated with interface "lo".

--vk