From owner-freebsd-questions  Fri May 14  1:10:25 1999
Delivered-To: freebsd-questions@freebsd.org
Received: from hermes.axis.de (hermes.axis.de [194.163.241.7])
	by hub.freebsd.org (Postfix) with SMTP id 6E23715558
	for <freebsd-questions@FreeBSD.ORG>; Fri, 14 May 1999 01:10:22 -0700 (PDT)
	(envelope-from maret@axis.de)
Received: from erlangen01.axis.de by hermes.axis.de
          via smtpd (for hub.FreeBSD.ORG [204.216.27.18]) with SMTP; 14 May 1999 08:10:23 UT
Received: (private information removed)
Message-ID: <91DA20EC3C3DD211833400A0245A4EA9BA0DD6@erlangen01.axis.de>
From: Alexander Maret <maret@axis.de>
To: "'freebsd-questions@FreeBSD.ORG'" <freebsd-questions@FreeBSD.ORG>
Subject: IPFILTER and default deny all
Date: Fri, 14 May 1999 10:10:13 +0200
MIME-Version: 1.0
X-Mailer: Internet Mail Service (5.5.2232.9)
Content-Type: text/plain;
	charset="iso-8859-1"
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.ORG

Hi,

I enabled IPFILTER in KERNEL to build up a Firewall. Everything is
working fine but there is something I don't like. As default 
IPFILTER allows every packet pass through. I think this is very 
insecure because if I boot my machine and IPFilter fails to start 
every packet can pass my firewall. Is there a possibility to set
"deny all" as default?

Bye,

 Alex


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message