From owner-freebsd-questions@FreeBSD.ORG Fri Aug 31 13:39:44 2007 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 6660D16A417 for ; Fri, 31 Aug 2007 13:39:44 +0000 (UTC) (envelope-from gpeel@thenetnow.com) Received: from thenetnow.com (thenetnow.com [69.90.69.141]) by mx1.freebsd.org (Postfix) with ESMTP id 4212213C469 for ; Fri, 31 Aug 2007 13:39:44 +0000 (UTC) (envelope-from gpeel@thenetnow.com) Received: from hpeel.ody.ca ([216.240.12.2] helo=GRANT) by constellation.thenetnow.com with esmtpa (Exim 4.63 (FreeBSD)) (envelope-from ) id 1IR6iF-00022S-9Y; Fri, 31 Aug 2007 09:39:03 -0400 Message-ID: <002301c7ebd4$47de17c0$6501a8c0@GRANT> From: "Grant Peel" To: "Mel" , References: <001a01c7ebcb$53e455b0$6501a8c0@GRANT> <200708311521.28643.fbsd.questions@rachie.is-a-geek.net> Date: Fri, 31 Aug 2007 09:38:57 -0400 Organization: The Net Now MIME-Version: 1.0 X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2900.3138 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3138 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable X-Content-Filtered-By: Mailman/MimeDel 2.1.5 Cc: Subject: Re: IPFW - Keep State X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: Grant Peel List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 31 Aug 2007 13:39:44 -0000 I don't use NAT, so is there any other compelling reasons? Speed etc? -Grant ----- Original Message -----=20 From: Mel=20 To: freebsd-questions@freebsd.org=20 Sent: Friday, August 31, 2007 9:21 AM Subject: Re: IPFW - Keep State On Friday 31 August 2007 14:34:51 Grant Peel wrote: > In a nutsheel, is it really necessary, or is thier a really = compelling > reason to use keep-state for a normal web - email server? > > I sometimes see "Too many dynamic rules" and can see a correlation = between > customer complaints and these log entries. > > My server all have about 200 rules, most of them counters for = bandwidth > accounting. It is necessary for NAT, since it doesn't know what to do with replies = from=20 webservers otherwise (internet:80 =3D> $ext_addr:high_port =3D what?) --=20 Mel _______________________________________________ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to = "freebsd-questions-unsubscribe@freebsd.org" -------------------------------------------------------------------------= ----- Total Control Panel Login =20 To: gpeel@thenetnow.com Block messages from this sender = (blacklist) =20 From: owner-freebsd-questions@freebsd.org Remove this sender = from my whitelist =20 =20 You received this message because the sender is on your = whitelist. =20