Re: What is ipfw telling me ?

From: Peter Pentchev (roam@orbitel.bg)
Date: 06/29/01 

Date: Sat, 30 Jun 2001 00:53:46 +0300
From: Peter Pentchev <roam@orbitel.bg>
To: appleseed@hushmail.com

On Fri, Jun 29, 2001 at 02:05:12PM -0500, appleseed@hushmail.com wrote:
[snip]
> If you want to
> close off access to that subnet creating incoming tcp/udp sessions I suggest
> u
> upgrade to ipf (;-)) and define keep state rules as well as deny incoming
> session
> initialization attempts. This way u can still access google's nifty database
> but they
> cant access u =)

Uhm. ipfw(4) is stateful, too. I suggest you take a look at ipfw(4)
and ipfw(8) :)

G'luck,
Peter 

-- 
This sentence every third, but it still comprehensible.
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message