From owner-freebsd-hackers Tue Sep 22 17:10:47 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id RAA06508 for freebsd-hackers-outgoing; Tue, 22 Sep 1998 17:10:47 -0700 (PDT) (envelope-from owner-freebsd-hackers@FreeBSD.ORG) Received: from Loki.orland.u91.k12.me.us (Loki.orland.u91.k12.me.us [169.244.111.67]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id RAA06360 for ; Tue, 22 Sep 1998 17:10:03 -0700 (PDT) (envelope-from netmonger@genesis.ispace.com) Received: from Celeris (56k-port4012.ime.net [209.90.195.22]) by Loki.orland.u91.k12.me.us (8.8.8/8.8.8) with SMTP id UAA11487; Tue, 22 Sep 1998 20:09:27 -0400 (EDT) (envelope-from netmonger@genesis.ispace.com) Message-Id: <199809230009.UAA11487@Loki.orland.u91.k12.me.us> X-Server-Comment: Sent via OCSNet/Orland, Admin is: Droobie@Onenetwork.orland.me.us X-Sender: netmonger@genesis.ispace.com X-Mailer: QUALCOMM Windows Eudora Pro Version 4.1.0.52 (Beta) Date: Tue, 22 Sep 1998 20:08:46 -0400 To: rotel@indigo.ie, FreeBSD Hackers From: Drew Baxter Subject: Re: Packet/traffic shapper ? In-Reply-To: <199809222349.AAA01658@indigo.ie> References: <199809211827.OAA09675@Loki.orland.u91.k12.me.us> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Sender: owner-freebsd-hackers@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG At 12:49 AM 9/23/98 +0000, Niall Smart wrote: > >Personally I don't think IPFW_DEFAULT_TO_ACCEPT is a bad idea, once you >are sure you have the accept rules necessary to ensure your connectivity >to the host you can pop in a deny all rule. This will probably be slower >than defaulting to deny though. --- Hm, isn't default_to_accept still affected by ipfw flush? --- Drew "Droobie" Baxter Network Admin/Professional Computer Nerd(TM) OneEX: The OneNetwork Exchange 207-942-0275 http://www.droo.orland.me.us To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-hackers" in the body of the message