From owner-freebsd-stable  Sat Jan 12  2:32:30 2002
Delivered-To: freebsd-stable@freebsd.org
Received: from mail.takas.lt (mail-src.takas.lt [212.59.31.66])
	by hub.freebsd.org (Postfix) with ESMTP id 7AF2737B41A
	for <stable@freebsd.org>; Sat, 12 Jan 2002 02:32:24 -0800 (PST)
Received: from localhost.lt ([213.190.49.125]) by mail.takas.lt with Microsoft SMTPSVC(5.0.2195.2966);
	 Sat, 12 Jan 2002 12:28:47 +0200
Received: (from rolnas@localhost)
	by localhost.lt (8.11.6/8.11.6) id g0CAUsF20577
	for stable@freebsd.org; Sat, 12 Jan 2002 12:30:54 +0200 (EET)
	(envelope-from rolnas)
Date: Sat, 12 Jan 2002 12:30:54 +0200
From: Rolandas Naujikas <rolnauj@delfi.lt>
To: stable@freebsd.org
Subject: tcp keepalive and dynamic ipfw rules
Message-ID: <20020112123054.A20486@localhost>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.2.5i
X-OriginalArrivalTime: 12 Jan 2002 10:28:47.0712 (UTC) FILETIME=[EB67BE00:01C19B53]
Sender: owner-freebsd-stable@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-stable.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-stable>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-stable>
X-Loop: FreeBSD.ORG


Hi all,

I have setup a dynamic firewall for my personal computer with such rules

ipfw add check-state
ipfw add deny tcp from any to any established
ipfw add pass tcp from me to any setup keep-state

from ipfw(8) manual on "FreeBSD 4.5-RC".

I found problem with ftp, when download pass longer 5 minutes, then after
download ftp client stall. I dont see more dynamic rule, allowing tcp
control connection. net.inet.tcp.always_keepalive=1.

Rolandas

P.S. I'm sorry for my English.

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-stable" in the body of the message