From owner-freebsd-hackers Thu Jan 16 16: 8: 2 2003 Delivered-To: freebsd-hackers@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 33B6B37B406 for ; Thu, 16 Jan 2003 16:08:01 -0800 (PST) Received: from ns.yogotech.com (ns.yogotech.com [206.127.123.66]) by mx1.FreeBSD.org (Postfix) with ESMTP id 5475B43E4A for ; Thu, 16 Jan 2003 16:08:00 -0800 (PST) (envelope-from nate@yogotech.com) Received: from emerger.yogotech.com (emerger.yogotech.com [206.127.123.131]) by ns.yogotech.com (8.9.3/8.9.3) with ESMTP id RAA01398; Thu, 16 Jan 2003 17:07:56 -0700 (MST) (envelope-from nate@yogotech.com) Received: (from nate@localhost) by emerger.yogotech.com (8.12.6/8.12.6) id h0H07uce070234; Thu, 16 Jan 2003 17:07:56 -0700 (MST) (envelope-from nate) From: Nate Williams MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Message-ID: <15911.18780.353808.445869@emerger.yogotech.com> Date: Thu, 16 Jan 2003 17:07:56 -0700 To: Terry Lambert Cc: Josh Brooks , freebsd-hackers@FreeBSD.ORG Subject: Re: FreeBSD firewall for high profile hosts - waste of time ? In-Reply-To: <3E2747BB.E2E34AC1@mindspring.com> References: <20030116155122.X38599-100000@mail.econolodgetulsa.com> <3E2747BB.E2E34AC1@mindspring.com> X-Mailer: VM 7.07 under 21.1 (patch 14) "Cuyahoga Valley" XEmacs Lucid Reply-To: nate@yogotech.com (Nate Williams) Sender: owner-freebsd-hackers@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG > PS: I still think that if your CPU pegs, you've got a loop in there > somewhere. Most common case is a "reject" or "deny". Try changing > all of them to "drop", instead, and see if that "fixes" it. FWIW, deny == drop. The 'reject' rule is the one that sends out ICMP and RST packets. Nate To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-hackers" in the body of the message