From owner-freebsd-questions@FreeBSD.ORG Sun Jan 18 23:29:41 2004 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 763EB16A4CE for ; Sun, 18 Jan 2004 23:29:41 -0800 (PST) Received: from sm1.r404.com (sm1.r404.com [69.56.206.2]) by mx1.FreeBSD.org (Postfix) with ESMTP id 2EF8A43D49 for ; Sun, 18 Jan 2004 23:29:40 -0800 (PST) (envelope-from radek@raadradd.com) Received: from qw66.neoplus.adsl.tpnet.pl ([80.50.242.66] helo=raadradd) by sm1.r404.com with asmtp (Exim 4.24) id 1AiTqk-00069B-Pj; Mon, 19 Jan 2004 02:29:31 -0500 Date: Mon, 19 Jan 2004 08:30:10 +0100 From: Radek Kozlowski X-Priority: 3 (Normal) Message-ID: <1381430967.20040119083010@raadradd.com> To: Rishi Chopra In-Reply-To: <400B2C25.8030103@cal.berkeley.edu> References: <400B2C25.8030103@cal.berkeley.edu> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit X-AntiAbuse: This header was added to track abuse, please include it with any abuse report X-AntiAbuse: Primary Hostname - sm1.r404.com X-AntiAbuse: Original Domain - freebsd.org X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12] X-AntiAbuse: Sender Address Domain - raadradd.com cc: questions@freebsd.org Subject: Re: rc.firewall 'simple' question X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 19 Jan 2004 07:29:41 -0000 On Monday, January 19, 2004, 2:00:21 AM, Rishi Chopra wrote: > Forgive the stupid question, but why are the 'rfc1918' and 'draft > manning' sections repeated in the default rc.firewall file? Does this > have something to do with the natd statement in between them? I > understand the rules are processed (added) sequentially, so am I missing > something? They are not repeated, they just look very similar to each other. Notice that the first part consists of rules 'from ANY to [...]' and the second part 'from [...] to ANY'. -Radek