From owner-freebsd-questions Thu Mar 20 16:26:59 2003 Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 9600037B401 for ; Thu, 20 Mar 2003 16:26:58 -0800 (PST) Received: from mailsrv.otenet.gr (mailsrv.otenet.gr [195.170.0.5]) by mx1.FreeBSD.org (Postfix) with ESMTP id 397EC43FAF for ; Thu, 20 Mar 2003 16:26:57 -0800 (PST) (envelope-from keramida@ceid.upatras.gr) Received: from gothmog.gr (patr530-a182.otenet.gr [212.205.215.182]) by mailsrv.otenet.gr (8.12.8/8.12.8) with ESMTP id h2L0Qr5u005166; Fri, 21 Mar 2003 02:26:54 +0200 (EET) Received: from gothmog.gr (gothmog [127.0.0.1]) by gothmog.gr (8.12.8/8.12.8) with ESMTP id h2L0Qqkg001885; Fri, 21 Mar 2003 02:26:52 +0200 (EET) (envelope-from keramida@ceid.upatras.gr) Received: (from giorgos@localhost) by gothmog.gr (8.12.8/8.12.8/Submit) id h2L0Qp87001884; Fri, 21 Mar 2003 02:26:51 +0200 (EET) (envelope-from keramida@ceid.upatras.gr) Date: Fri, 21 Mar 2003 02:26:51 +0200 From: Giorgos Keramidas To: Drew Tomlinson Cc: freebsd-questions@FreeBSD.ORG Subject: Re: IPFW - "keep-state/check-state" And "setup/established" Confusion Message-ID: <20030321002651.GE1538@gothmog.gr> References: <00d401c2ee6e$0abf07e0$6e2a6ba5@tagalong> <20030320165232.GB6347@gothmog.gr> <000a01c2ef05$43ed1100$6e2a6ba5@tagalong> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <000a01c2ef05$43ed1100$6e2a6ba5@tagalong> X-RAVMilter-Version: 8.4.2(snapshot 20021217) (terpsi) Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG On 2003-03-20 09:22, Drew Tomlinson wrote: > It does help. One other question I have is that I never see the > "check-state" packet count incrementing. However I vaguely recall > reading somewhere that it doesn't, even when packets pass via the > rule. Is this correct? I'm not sure if this is the way it works. I'd have to check the kernel side of ipfw to see if this works this way, and IPFW2's kernel part is far from understandable for a kernel newbie like me :) - Giorgos To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message