From owner-freebsd-questions@FreeBSD.ORG Sun Feb 13 13:33:14 2005 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 54C0E16A4CE for ; Sun, 13 Feb 2005 13:33:14 +0000 (GMT) Received: from nagual.st (cc20684-a.assen1.dr.home.nl [217.122.132.217]) by mx1.FreeBSD.org (Postfix) with ESMTP id 94FBF43D39 for ; Sun, 13 Feb 2005 13:33:13 +0000 (GMT) (envelope-from dick@nagual.st) Received: from pooh.nagual.st (pooh.nagual.st [192.168.11.22]) by nagual.st with esmtp; Sun, 13 Feb 2005 14:31:58 +0100 Date: Sun, 13 Feb 2005 14:33:19 +0100 From: dick hoogendijk To: freebsd-questions@freebsd.org Message-Id: <20050213143319.0fe50e3f.dick@nagual.st> Organization: nagual SiTe X-Mailer: Sylpheed version 1.0.1 (GTK+ 1.2.10; i386-portbld-freebsd4.11) Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Subject: ipfilter outgoing X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 13 Feb 2005 13:33:14 -0000 It's difficult to program all outgoing filter rules in ipf. Every now and then I bumb into a blocked connection that I did want to work in the first place. Only because an outgoing port was/is blocked. What is the most secure way to do things? Block all outgoing and open up what I wnat or can I use i.e. the next rule in a safe way: ### pass out quick proto tcp/udp from any to any keep state keep frags Any help or suggestions are appreciated. Yes I did read all the ipf help files but it dazzles me. -- dick -- http://nagual.st/ -- PGP/GnuPG key: F86289CE ++ Running FreeBSD 4.11 ++ FreeBSD 5.3 + Nai tiruvantel ar vayuvantel i Valar tielyanna nu vilja