Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 01 Aug 2000 12:00:34 -0500
From:      Stephen Montgomery-Smith <stephen@math.missouri.edu>
To:        Ruslan Ermilov <ru@sunbay.com>
Cc:        Gregory Bond <gnb@itga.com.au>, net@FreeBSD.org
Subject:   Re: conf/20197: rc.firewall with firewall_type=simple doesn't work with  natd
Message-ID:  <39870232.F1E1C38C@math.missouri.edu>
References:  <200007262240.PAA88875@freefall.freebsd.org> <20000731190439.A75240@sunbay.com>

next in thread | previous in thread | raw e-mail | index | archive | help
I think that rc.firewall should serve two purposes:

1)  In as much as possible, it should work right out of the box.

2)  It should teach the newbie to firewalls - by looking at the code he/she
    should learn about firewalls (that's how I learned - a week ago I was
    a newbie - and actually still am).

I think Ruslan Ermilov's suggested patch succeeds admirably in both these
respects.  The change of position of the natd command is clear, and should
alert the reader that there is a reason for it.

Perhaps the only change I would make is to keep a comment explaining briefly
why the natd is positioned where it is.  But I can understand if others feel it
unnecessary.



-- 
Stephen Montgomery-Smith
stephen@math.missouri.edu
http://www.math.missouri.edu/~stephen


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-net" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?39870232.F1E1C38C>