From owner-freebsd-current  Mon Feb 26 09:15:37 1996
Return-Path: owner-current
Received: (from root@localhost)
          by freefall.freebsd.org (8.7.3/8.7.3) id JAA01881
          for current-outgoing; Mon, 26 Feb 1996 09:15:37 -0800 (PST)
Received: from haven.uniserve.com (haven.uniserve.com [198.53.215.121])
          by freefall.freebsd.org (8.7.3/8.7.3) with ESMTP id JAA01875
          Mon, 26 Feb 1996 09:15:32 -0800 (PST)
Received: by haven.uniserve.com id <30786-28103>; Mon, 26 Feb 1996 09:18:08 -0800
Date: 	Mon, 26 Feb 1996 09:17:59 -0800 (PST)
From: Tom Samplonius <tom@uniserve.com>
To: michael butler <imb@scgt.oz.au>
cc: Poul-Henning Kamp <phk@critter.tfs.com>, stable@freebsd.org,
        current@freebsd.org
Subject: Re: -stable hangs at boot (fwd)
In-Reply-To: <199602261613.DAA14868@asstdc.scgt.oz.au>
Message-ID: <Pine.BSF.3.91.960226091641.21606B-100000@haven.uniserve.com>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-current@freebsd.org
Precedence: bulk


On Tue, 27 Feb 1996, michael butler wrote:

> Poul-Henning Kamp writes:
> 
> > Well, this happens to be your view.  I know machines where IPFW are being
> > used to restrict what users on the machine can do, this is only possible
> > if you filter >ALL< traffic, to and from the machine.
> 
> I haven't checked this but .. what happens to a packet which matches a
> "reject" rule when it's not actually destined for the machine doing the
> filtering .. does it still generate an ICMP "host unreachable" ?

  The system shouldn't be getting packets not destined for it, unless the 
interface is in promiscous mode, which it not normally.

Tom