Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 13 Aug 2003 10:18:08 +0300
From:      Ion-Mihai Tetcu <itetcu@tecnik93.com>
To:        Chico <chicoman341978@yahoo.com>, freebsd-config@freebsd.org
Subject:   Re: Rule Numbering...
Message-ID:  <200308131018.08322.itetcu@tecnik93.com>
In-Reply-To: <20030812200556.76245.qmail@web12002.mail.yahoo.com>
References:  <20030812200556.76245.qmail@web12002.mail.yahoo.com>

next in thread | previous in thread | raw e-mail | index | archive | help

On Tuesday 12 August 2003 23:05, Chico wrote:
> I am wondering what the deal is with the Rule
> numbering in IPFW?  I am switching from IPF to IPFW
> because it has more functionality, however I am
> confused with the rule numbering scheme.  When I read
> "how-to's" on the internet people are numbering the
> firewall rules in there /etc/ipfw.rules file starting
> with 00300, 00301...  and then start going to 00400,
> 00401, 00402...  What the deal with this scheme?

The rules are check from the lowest to the highest, and the check stops 
at the first match. I would recommend a 0300, 0310, etc. scheme so that 
you have pace to add a rule (by hand) if that is necessarily.

IOnut


Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200308131018.08322.itetcu>