Date: Tue, 25 Sep 2001 19:14:48 +0200 From: Poul-Henning Kamp <phk@critter.freebsd.dk> To: ru@FreeBSD.ORG Cc: fj@batmule.dk, freebsd-bugs@FreeBSD.ORG Subject: Re: misc/30255: [PATCH] Packets reinjected by natd but denied by ipfw generates annoying errors Message-ID: <31664.1001438088@critter> In-Reply-To: Your message of "Tue, 25 Sep 2001 07:27:19 PDT." <200109251427.f8PERJL37187@freefall.freebsd.org>
next in thread | previous in thread | raw e-mail | index | archive | help
>State-Changed-From-To: open->closed >State-Changed-By: ru >State-Changed-When: Tue Sep 25 07:24:17 PDT 2001 >State-Changed-Why: >With my MAINTAINER hat on, I don't like this option. > >This error usually indicates a misconfigured firewall. >It is almost always possible to write firewall rules >that do not result in EACCES from firewall. I think you're being too harsh here Ruslan. While it may theoretically be possible to write such rules, I have myself often found it simpler and faster to reject on the "backside" of natd. Considering what is proposed is an option I think it should be committed. -- Poul-Henning Kamp | UNIX since Zilog Zeus 3.20 phk@FreeBSD.ORG | TCP/IP since RFC 956 FreeBSD committer | BSD since 4.3-tahoe Never attribute to malice what can adequately be explained by incompetence. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-bugs" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?31664.1001438088>