From owner-freebsd-questions Fri Jun 14 12: 6:56 2002 Delivered-To: freebsd-questions@freebsd.org Received: from netserv1.urc.ac.ru (netserv1.urc.ac.ru [193.233.85.33]) by hub.freebsd.org (Postfix) with ESMTP id 544EC37B403 for ; Fri, 14 Jun 2002 12:06:51 -0700 (PDT) Received: (from uucp@localhost) by netserv1.urc.ac.ru (8.11.6/8.11.6) with UUCP id g5EJ1dG26780; Sat, 15 Jun 2002 01:01:39 +0600 (YEKST) (envelope-from ilia@academy.urc.ac.ru) Received: from localhost (localhost [127.0.0.1]) by sol.chel.skbkontur.ru (8.12.3/8.12.3) with ESMTP id g5EIX4IA047051 (version=TLSv1/SSLv3 cipher=EDH-RSA-DES-CBC3-SHA bits=168 verify=NO); Sat, 15 Jun 2002 00:33:10 +0600 (YEKST) (envelope-from ilia@academy.urc.ac.ru) Date: Sat, 15 Jun 2002 00:33:04 +0600 (YEKST) From: =?koi8-r?B?6czY0SD7ydDJw8nO?= X-X-Sender: ilia@sol.chel.skbkontur.ru To: Joe & Fhe Barbish Cc: FBSDQ Subject: RE: ipfw: outgoing connections only In-Reply-To: Message-ID: <20020615003006.A46377-100000@sol.chel.skbkontur.ru> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG > > # Allow the packet through if it has previous been added to the > # the "dynamic" rules table by an allow keep-state statement. > $cmd 00400 check-state > > # Run all private LAN xl0 packet traffic through the dynamic rules > # table so the IP address are in sync with Natd. You would have one > # rule like this for each Nic card you have for private lans. > $cmd 00500 allow all from any to any via xl0 keep-state 00051 0 0 check-state 00052 1685 333307 allow tcp from me to any keep-state setup 00053 2210 500566 allow ip from me to any why does check-state rule has "0" packets matched ? Regards, Ilia Chipitsine To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message