From owner-freebsd-questions@FreeBSD.ORG Fri Sep 17 16:47:15 2004 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 85D4D16A4CE for ; Fri, 17 Sep 2004 16:47:15 +0000 (GMT) Received: from advmail.lsn.net (advmail.lsn.net [66.90.138.148]) by mx1.FreeBSD.org (Postfix) with ESMTP id E25AA43D2F for ; Fri, 17 Sep 2004 16:47:14 +0000 (GMT) (envelope-from norm@etherealconsulting.com) Received: from etherealconsulting.com (24-155-40-125.ip.grandenetworks.net [24.155.40.125]) by advmail.lsn.net (8.12.8/8.12.4) with ESMTP id i8HGlB0A025117; Fri, 17 Sep 2004 11:47:16 -0500 Message-ID: <414B150C.6090608@etherealconsulting.com> Date: Fri, 17 Sep 2004 11:47:08 -0500 From: Norm Vilmer User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.6) Gecko/20040113 X-Accept-Language: en-us, en MIME-Version: 1.0 To: Micheal Patterson References: <414A6E9C.4060708@etherealconsulting.com><020b01c49c76$e3d1ada0$0201a8c0@dredster> <414AF79C.4030809@etherealconsulting.com> <06af01c49cc5$b0b615b0$4df24243@tsgincorporated.com> <414B02FD.6020703@etherealconsulting.com> <06fd01c49ccd$36e91450$4df24243@tsgincorporated.com> In-Reply-To: <06fd01c49ccd$36e91450$4df24243@tsgincorporated.com> Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit X-AntiVirus: checked by Vexira Milter 1.0.6; VAE 6.27.0.10; VDF 6.27.0.66 cc: freebsd-questions@freebsd.org Subject: Re: Too many dynamic rules, sorry X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 17 Sep 2004 16:47:15 -0000 Micheal Patterson wrote: > > ----- Original Message ----- > From: "Norm Vilmer" > To: "Micheal Patterson" > Cc: > Sent: Friday, September 17, 2004 10:30 AM > Subject: Re: Too many dynamic rules, sorry > > > > >>I do have a check-state rule >> >>add 00200 check-state >> >>Norm Vilmer > > > Ok. Then right above the check-state entry, place an > > allow ip from 123.123.123/24 to 123.123.123./24 > > Replace the ip's with the appropriate network/metric for your lan and that > will allow lan traffic to go to itself unhindered by any stateful checks. > > -- > > Micheal Patterson > TSG Network Administration > 405-917-0600 > > Confidentiality Notice: This e-mail message, including any attachments, > is for the sole use of the intended recipient(s) and may contain > confidential and privileged information. Any unauthorized review, use, > disclosure or distribution is prohibited. If you are not the intended > recipient, please contact the sender by reply e-mail and destroy all > copies of the original message. > > > > would this be the same? add 00200 allow all from any to any via ${iif} keep-state add 00210 check-state