From owner-freebsd-questions@FreeBSD.ORG  Sat Feb 14 18:32:46 2004
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 7BEAA16A4CE
	for <freebsd-questions@freebsd.org>;
	Sat, 14 Feb 2004 18:32:46 -0800 (PST)
Received: from radicalv.com (secure.radicalv.com [216.118.91.10])
	by mx1.FreeBSD.org (Postfix) with SMTP id 0797543D1D
	for <freebsd-questions@freebsd.org>;
	Sat, 14 Feb 2004 18:32:46 -0800 (PST)
	(envelope-from ecrist@adtechintegrated.com)
Received: (qmail 68928 invoked from network); 15 Feb 2004 02:32:36 -0000
Received: from unknown (HELO localhost.invalid) (63.228.14.245)
  by mail.radicalv.com with SMTP; 15 Feb 2004 02:32:36 -0000
From: Eric F Crist <ecrist@adtechintegrated.com>
Organization: AdTech Integrated Systems, Inc
To: freebsd-questions@freebsd.org
Date: Sat, 14 Feb 2004 20:32:36 -0600
User-Agent: KMail/1.6
References: <20040214233615.GB38665@users.munk.nu>
	<20040215020913.GA56178@falcon.midgard.homeip.net>
	<200402142014.37581.ecrist@adtechintegrated.com>
In-Reply-To: <200402142014.37581.ecrist@adtechintegrated.com>
MIME-Version: 1.0
Content-Type: multipart/signed;
  protocol="application/pgp-signature";
  micalg=pgp-sha1;
  boundary="Boundary-02=_MptLAiaT2bz8cbt";
  charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
Message-Id: <200402142032.44456.ecrist@adtechintegrated.com>
cc: Jez Hancock <jez.hancock@munk.nu>
Subject: 
	Re: continued IPFW issues... (actually a lack of ability on my part)
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
Reply-To: ecrist@adtechintegrated.com
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sun, 15 Feb 2004 02:32:46 -0000


--Boundary-02=_MptLAiaT2bz8cbt
Content-Type: text/plain;
  charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline

On Saturday 14 February 2004 08:14 pm, Eric F Crist wrote:
> Well, from what I understand, isn't udp a state-less protocol?  How would
> established/keepstate/check-state work with that?

Ok, so I read that check-state/keep-state should be able to work with udp. =
=20
According to the man page, I should add:

ipfw add check-state
ipfw add allow udp from my-subnet to any keep-state
ipfw add deny udp from any to any

my-subnet was changed to my /29 network address (i.e. 1.2.3.4/29).  Still, =
the=20
rule following all of these is ipfw add allow udp from any to any and it's=
=20
getting all the packets.  I'm still reading, but the check-state isn't maki=
ng=20
sense to me.

TIA
=2D-=20
Eric F Crist
AdTech Integrated Systems, Inc
(612) 998-3588

--Boundary-02=_MptLAiaT2bz8cbt
Content-Type: application/pgp-signature
Content-Description: signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (FreeBSD)

iD8DBQBALtpMzdyDbTMRQIYRAokeAKCXhlLyu7KAjDyGwm8YQ5jKlT8GPACfSz6x
Whpihb8PwBynKeFII1n+xls=
=1MOq
-----END PGP SIGNATURE-----

--Boundary-02=_MptLAiaT2bz8cbt--