Date: Wed, 16 May 2001 21:31:54 +0200 From: Gerhard Sittig <Gerhard.Sittig@gmx.net> To: freebsd-security@freebsd.org Subject: Re: risks of ip-forwarding, without ipf/ipfw Message-ID: <20010516213154.A253@speedy.gsinet> In-Reply-To: <20010516155615.40395.qmail@web14503.mail.yahoo.com>; from jedovaty@yahoo.com on Wed, May 16, 2001 at 08:56:15AM -0700 References: <20010516092959.A42898@beheer2.iae.nl> <20010516155615.40395.qmail@web14503.mail.yahoo.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On Wed, May 16, 2001 at 08:56 -0700, Jano Lukac wrote:
>
> If your IP changes (e.g. in a PPP or PPPoE link), do you have
> to rerun ipf/ipfw/natd everytime? Or is freebsd smart about
> this (unlike the unnamed arctic semi-counterpart which uses
> ipchains/iptables)?
Since the original question was heavily crossposted and went to
the ipfilter list as well, I would like to point out that ipf(4)
has to be "pushed" when interfaces should change their
parameters. Read "man 8 ipf" and look at the -y switch. Plus
look at the notion of specifying 0.0.0.0/32 addresses in the
numerous examples shipped with ipfilter. Read "man 8 ppp" for
where to hook things in (ppp.link{up,down}, I assume).
virtually yours 82D1 9B9C 01DC 4FB4 D7B4 61BE 3F49 4F77 72DE DA76
Gerhard Sittig true | mail -s "get gpg key" Gerhard.Sittig@gmx.net
--
If you don't understand or are scared by any of the above
ask your parents or an adult to help you.
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20010516213154.A253>