From owner-freebsd-questions Tue Sep 25 20:13:48 2001 Delivered-To: freebsd-questions@freebsd.org Received: from cody.jharris.com (cody.jharris.com [205.238.128.83]) by hub.freebsd.org (Postfix) with ESMTP id 71B5D37B413 for ; Tue, 25 Sep 2001 20:13:46 -0700 (PDT) Received: from localhost (nick@localhost) by cody.jharris.com (8.11.1/8.9.3) with ESMTP id f8Q3Dfr47787; Tue, 25 Sep 2001 22:13:41 -0500 (CDT) (envelope-from nick@rogness.net) Date: Tue, 25 Sep 2001 22:13:41 -0500 (CDT) From: Nick Rogness X-Sender: nick@cody.jharris.com To: David Kelly Cc: Brian Whalen , freebsd-questions@FreeBSD.ORG Subject: Re: natd/ipfw/sshd problem. In-Reply-To: <200109260307.f8Q37Ww18996@grumpy.dyndns.org> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG On Tue, 25 Sep 2001, David Kelly wrote: > Brian Whalen writes: > > Is anyone doing anything about that?? > [...] > > > > I find it interesting that somehow 27 packets got past 65000. Can only > > > > assume not all of the above rules were added at the same time. > > > > > > It is possible for packets to arrive before the firewall rules get > > > loaded. > > That's why the default is to deny all. Is exactly the same to IP from > the outside as if the interface was not up yet. Yes, but my point was that the counters will still get incremented. Nick Rogness - Keep on Routing in a Free World... "FreeBSD: The Power to Serve!" To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message