From owner-freebsd-questions  Sat Jun 15 17:48:14 2002
Delivered-To: freebsd-questions@freebsd.org
Received: from smtp.a1poweruser.com (oh-chardon6a-62.clvhoh.adelphia.net [68.65.175.62])
	by hub.freebsd.org (Postfix) with ESMTP id C7CBF37B43E
	for <questions@FreeBSD.ORG>; Sat, 15 Jun 2002 17:48:11 -0700 (PDT)
Received: from barbish (unknown [10.0.10.6])
	by smtp.a1poweruser.com (Postfix) with SMTP
	id 87E8A116; Sat, 15 Jun 2002 20:49:26 -0400 (EDT)
Reply-To: <barbish@a1poweruser.com>
From: "Joe & Fhe Barbish" <barbish@a1poweruser.com>
To: "Ilia Chipitsine" <ilia@cgu.chel.su>
Cc: "FBSDQ" <questions@FreeBSD.ORG>
Subject: RE: ipfw: stateful rules & UDP/ICMP
Date: Sat, 15 Jun 2002 20:46:38 -0400
Message-ID: <MIEPLLIBMLEEABPDBIEGEENHCCAA.barbish@a1poweruser.com>
MIME-Version: 1.0
Content-Type: text/plain;
	charset="koi8-r"
Content-Transfer-Encoding: 8bit
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2911.0)
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Importance: Normal
In-Reply-To: <Pine.BSF.4.10.10206152154500.481-100000@jane.poka.net>
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-questions.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-questions>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-questions>
X-Loop: FreeBSD.ORG

First of all there are two stateful rule types.
The simple stateful  setup/established rules type only works on the tcp
protocol.
The advanced stateful check-state/keep-state rule type works on tcp & udp
protocols
and should be used exclusively in your ipfw rules file for max protection.
ICMP traffic can only be denied or allowed using stateless rules, advanced
stateful
check-state/keep-state rules have no special effect on ICMP packets.


-----Original Message-----
From: owner-freebsd-questions@FreeBSD.ORG
[mailto:owner-freebsd-questions@FreeBSD.ORG]On Behalf Of Ilia Chipitsine
Sent: Saturday, June 15, 2002 11:56 AM
To: questions@FreeBSD.ORG
Subject: ipfw: stateful rules & UDP/ICMP

Dear Sirs,

do stateful rules have any effect on UDP/ICMP trafic ?

Regards, (Наилучшие пожелания)
Ilia Chipitsine (Илья Шипицин)


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message