From owner-freebsd-hackers Sun Feb 7 13:18:28 1999 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id NAA15713 for freebsd-hackers-outgoing; Sun, 7 Feb 1999 13:18:28 -0800 (PST) (envelope-from owner-freebsd-hackers@FreeBSD.ORG) Received: from awfulhak.org (awfulhak.force9.co.uk [195.166.136.63]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id NAA15676; Sun, 7 Feb 1999 13:18:14 -0800 (PST) (envelope-from brian@Awfulhak.org) Received: from keep.lan.Awfulhak.org (keep.lan.Awfulhak.org [172.16.0.8]) by awfulhak.org (8.8.8/8.8.8) with ESMTP id UAA01693; Sun, 7 Feb 1999 20:59:38 GMT (envelope-from brian@Awfulhak.org) Received: from keep.lan.Awfulhak.org (localhost [127.0.0.1]) by keep.lan.Awfulhak.org (8.9.2/8.9.2) with ESMTP id UAA38475; Sun, 7 Feb 1999 20:59:26 GMT (envelope-from brian@keep.lan.Awfulhak.org) Message-Id: <199902072059.UAA38475@keep.lan.Awfulhak.org> X-Mailer: exmh version 2.0.2 2/24/98 To: Danil Shebunin cc: freebsd-questions@FreeBSD.ORG, freebsd-hackers@FreeBSD.ORG Subject: Re: user ppp packet filtering & ipfw In-reply-to: Your message of "Sun, 07 Feb 1999 13:43:25 +0300." Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Date: Sun, 07 Feb 1999 20:59:26 +0000 From: Brian Somers Sender: owner-freebsd-hackers@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG [.....] > When the rules calculated, if packet is come from outside (Internet): > before IP packet de-aliasing is performed, or after the packet appears in > internal network? And what about packet going from inside to outside? filter rules are applied before outgoing stuff is aliased and after incoming stuff is de-aliased. > Maybe the point is to use ppp packet filtering for external network and > ipfw - for internal? Or maybe I can use ipfw for both networks. In this > case, how can I specify dynamic IPaddr in ipfw rules. Use the interface rather than the IP address (via tun0). > P.P.S. PLEASE, PLEASE, PLEASE Reply to my e-mail also - I do not > subscribed on this mailing lists. > > > Thanks, as long as you answer. > > -- > ===---===---===---===---===---=== > Have a nice CONNECT! > Dan (daktaklakpak@public.mtu.ru) > ===---===---===---===---===---=== -- Brian Don't _EVER_ lose your sense of humour ! To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-hackers" in the body of the message