Date: Fri, 21 Mar 2003 02:26:51 +0200 From: Giorgos Keramidas <keramida@ceid.upatras.gr> To: Drew Tomlinson <drew@mykitchentable.net> Cc: freebsd-questions@FreeBSD.ORG Subject: Re: IPFW - "keep-state/check-state" And "setup/established" Confusion Message-ID: <20030321002651.GE1538@gothmog.gr> In-Reply-To: <000a01c2ef05$43ed1100$6e2a6ba5@tagalong> References: <00d401c2ee6e$0abf07e0$6e2a6ba5@tagalong> <20030320165232.GB6347@gothmog.gr> <000a01c2ef05$43ed1100$6e2a6ba5@tagalong>
next in thread | previous in thread | raw e-mail | index | archive | help
On 2003-03-20 09:22, Drew Tomlinson <drew@mykitchentable.net> wrote: > It does help. One other question I have is that I never see the > "check-state" packet count incrementing. However I vaguely recall > reading somewhere that it doesn't, even when packets pass via the > rule. Is this correct? I'm not sure if this is the way it works. I'd have to check the kernel side of ipfw to see if this works this way, and IPFW2's kernel part is far from understandable for a kernel newbie like me :) - Giorgos To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20030321002651.GE1538>