From owner-freebsd-config@FreeBSD.ORG Wed Aug 13 00:26:24 2003 Return-Path: Delivered-To: freebsd-config@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 78FA637B401 for ; Wed, 13 Aug 2003 00:26:24 -0700 (PDT) Received: from rdsnet.ro (mail.rdsnet.ro [193.231.236.16]) by mx1.FreeBSD.org (Postfix) with SMTP id 726D643FA3 for ; Wed, 13 Aug 2003 00:26:20 -0700 (PDT) (envelope-from itetcu@cameradicommercio.ro) Received: (qmail 4739 invoked from network); 13 Aug 2003 07:18:04 -0000 Received: from unknown (HELO buh.cameradicommercio.ro) (81.196.25.19) by mail.rdsnet.ro with SMTP; 13 Aug 2003 07:18:04 -0000 Received: by buh.cameradicommercio.ro (Postfix, from userid 1001) id DDE5755; Wed, 13 Aug 2003 10:18:08 +0300 (EEST) From: Ion-Mihai Tetcu Organization: Tecnik'93 S.R.L. To: Chico , freebsd-config@freebsd.org Date: Wed, 13 Aug 2003 10:18:08 +0300 User-Agent: KMail/1.5.2 References: <20030812200556.76245.qmail@web12002.mail.yahoo.com> In-Reply-To: <20030812200556.76245.qmail@web12002.mail.yahoo.com> MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit Content-Disposition: inline Message-Id: <200308131018.08322.itetcu@tecnik93.com> Subject: Re: Rule Numbering... X-BeenThere: freebsd-config@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Installation and Configuration List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 13 Aug 2003 07:26:24 -0000 On Tuesday 12 August 2003 23:05, Chico wrote: > I am wondering what the deal is with the Rule > numbering in IPFW? I am switching from IPF to IPFW > because it has more functionality, however I am > confused with the rule numbering scheme. When I read > "how-to's" on the internet people are numbering the > firewall rules in there /etc/ipfw.rules file starting > with 00300, 00301... and then start going to 00400, > 00401, 00402... What the deal with this scheme? The rules are check from the lowest to the highest, and the check stops at the first match. I would recommend a 0300, 0310, etc. scheme so that you have pace to add a rule (by hand) if that is necessarily. IOnut