From owner-freebsd-questions Sun Dec 5 17:17:57 1999 Delivered-To: freebsd-questions@freebsd.org Received: from web3002.mail.yahoo.com (web3002.mail.yahoo.com [204.71.202.165]) by hub.freebsd.org (Postfix) with SMTP id C903514E08 for ; Sun, 5 Dec 1999 17:17:55 -0800 (PST) (envelope-from galluccib@yahoo.ie) Received: (qmail 11616 invoked by uid 60001); 6 Dec 1999 01:17:55 -0000 Message-ID: <19991206011755.11615.qmail@web3002.mail.yahoo.com> Received: from [216.174.90.43] by web3002.mail.yahoo.com; Sun, 05 Dec 1999 17:17:55 PST Date: Sun, 5 Dec 1999 17:17:55 -0800 (PST) From: Brian Gallucci Subject: IPFW established To: freebsd-questions@FreeBSD.ORG Cc: briang@expnet.net MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG -------------------------------------------------------------------------------- I just have one question about the established command in rc.firewall. I have heard that if we add -> $fwcmd add pass tcp from any to any established $fwcmd add pass tcp from any to any 20 setup $fwcmd add pass tcp from any to any 21 setup $fwcmd add pass tcp from any to any 80 setup vs $fwcmd add pass tcp from any 20 to any $fwcmd add pass tcp from any to any 20 $fwcmd add pass tcp from any 21 to any $fwcmd add pass tcp from any to any 21 Using the established command will give us better performance on the firewall, is this correct ? Can you email me back at briang@expnet.net because I'm not on the mailing list. Thanks Brian Gallucci Sr. Network Engineer Network Operations Center Express Networks, Inc. briang@expnet.net ____________________________________________________________ Do You Yahoo!? Get your free @yahoo.co.uk address at http://mail.yahoo.co.uk or your free @yahoo.ie address at http://mail.yahoo.ie To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message