Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 30 Jun 2001 00:53:46 +0300
From:      Peter Pentchev <roam@orbitel.bg>
To:        appleseed@hushmail.com
Cc:        freebsd-security@FreeBSD.ORG
Subject:   Re: What is ipfw telling me ?
Message-ID:  <20010630005346.A887@ringworld.oblivion.bg>
In-Reply-To: <200106292115.OAA06336@user7.hushmail.com>; from appleseed@hushmail.com on Fri, Jun 29, 2001 at 02:05:12PM -0500
References:  <200106292115.OAA06336@user7.hushmail.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On Fri, Jun 29, 2001 at 02:05:12PM -0500, appleseed@hushmail.com wrote:
[snip]
> If you want to
> close off access to that subnet creating incoming tcp/udp sessions I suggest 
> u
> upgrade to ipf (;-)) and define keep state rules as well as deny incoming 
> session
> initialization attempts. This way u can still access google's nifty database 
> but they
> cant access u =)

Uhm.  ipfw(4) is stateful, too.  I suggest you take a look at ipfw(4)
and ipfw(8) :)

G'luck,
Peter

-- 
This sentence every third, but it still comprehensible.

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20010630005346.A887>