From owner-freebsd-security  Mon Jan  7  8:50:47 2002
Delivered-To: freebsd-security@freebsd.org
Received: from hotmail.com (f271.law10.hotmail.com [64.4.14.146])
	by hub.freebsd.org (Postfix) with ESMTP id CFA0337B404
	for <freebsd-security@FreeBSD.ORG>; Mon,  7 Jan 2002 08:50:44 -0800 (PST)
Received: from mail pickup service by hotmail.com with Microsoft SMTPSVC;
	 Mon, 7 Jan 2002 08:50:44 -0800
Received: from 207.236.210.167 by lw10fd.law10.hotmail.msn.com with HTTP;
	Mon, 07 Jan 2002 16:50:44 GMT
X-Originating-IP: [207.236.210.167]
From: "Ripper Roo" <ripper_roo1@hotmail.com>
To: freebsd-security@FreeBSD.ORG
Subject: IPFW - Updating config file & dynamic ruleset
Date: Mon, 07 Jan 2002 16:50:44 +0000
Mime-Version: 1.0
Content-Type: text/plain; format=flowed
Message-ID: <F271AMfKQu1bCdUg07M00012012@hotmail.com>
X-OriginalArrivalTime: 07 Jan 2002 16:50:44.0656 (UTC) FILETIME=[72E72300:01C1979B]
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-security.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-security>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-security>
X-Loop: FreeBSD.org

Hello,

I've just started using IPFW and use the 'file=' option to load my rules. I 
don't understand, though, how rules can be kept updated in that file after 
dynamic changes to survive reboots?

Also, how long are dynamic rules maintained and do the stateful rules follow 
TCP sequence numbers in IPFW to validate packets "authenticity"?

Thanks,

--Ripper.

_________________________________________________________________
MSN Photos is the easiest way to share and print your photos: 
http://photos.msn.com/support/worldwide.aspx


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message