From owner-freebsd-questions  Thu May  2 11:12:39 2002
Delivered-To: freebsd-questions@freebsd.org
Received: from web11605.mail.yahoo.com (web11605.mail.yahoo.com [216.136.172.57])
	by hub.freebsd.org (Postfix) with SMTP id 986F937B41F
	for <freebsd-questions@freebsd.org>; Thu,  2 May 2002 11:12:34 -0700 (PDT)
Message-ID: <20020502181234.80626.qmail@web11605.mail.yahoo.com>
Received: from [64.41.50.93] by web11605.mail.yahoo.com via HTTP; Thu, 02 May 2002 11:12:34 PDT
Date: Thu, 2 May 2002 11:12:34 -0700 (PDT)
From: Michael Reynolds <wshs_chat@yahoo.com>
Subject: RE: ipfw question(s?)
To: freebsd-questions@freebsd.org
In-Reply-To: <LPBBIGIAAKKEOEJOLEGOEEGNCPAA.barbish@a1poweruser.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-questions.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-questions>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-questions>
X-Loop: FreeBSD.ORG

--- Joe & Fhe Barbish <barbish@a1poweruser.com> wrote:
> You are using stateless rules, the most primitive of all the ipfw
> rule types. It is very easy to get past a firewall that only uses
> these types of rules. If you really want firewall protection then you
> have to use the advanced stateful rule type that came out in FBSD 
> version 4.0. Read
> this
> 
> http://www.freebsd-howto.com/HOWTO/Ipfw-Advanced-Supplement-HOWTO
> 
The only thing I use ipfw for is to keep internal clients from using
stuff they shouldn't be.  For example, I don't want a web hosting
client to be using chat.

__________________________________________________
Do You Yahoo!?
Yahoo! Health - your guide to health and wellness
http://health.yahoo.com

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message