From owner-freebsd-audit Tue Mar 20 23:39:15 2001 Delivered-To: freebsd-audit@freebsd.org Received: from gratis.grondar.za (grouter.grondar.za [196.7.18.65]) by hub.freebsd.org (Postfix) with ESMTP id 2E7FA37B71C for ; Tue, 20 Mar 2001 23:39:08 -0800 (PST) (envelope-from mark@grondar.za) Received: from grondar.za (root@gratis.grondar.za [196.7.18.133]) by gratis.grondar.za (8.11.1/8.11.1) with ESMTP id f2L7cof42204; Wed, 21 Mar 2001 09:38:52 +0200 (SAST) (envelope-from mark@grondar.za) Message-Id: <200103210738.f2L7cof42204@gratis.grondar.za> To: "Paul " =?iso-8859-1?Q?Richards=FC?= "" Cc: freebsd-audit@FreeBSD.ORG Subject: Re: ipfw permanent rules References: <3AB857E7.D4CEBD40@freebsd-services.co.uk> In-Reply-To: <3AB857E7.D4CEBD40@freebsd-services.co.uk> ; from Paul "=?iso-8859-1?Q?Richards=FC?= " "Wed, 21 Mar 2001 07:27:35 GMT." Date: Wed, 21 Mar 2001 09:39:53 +0200 From: Mark Murray Sender: owner-freebsd-audit@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG > What do people think of the the patch below. I think it is a nifty idea! > It sets a rule number below which rules will not be flushed. I've been > using it to install permanent rules, like SSH access from the office to > remote servers, so I can flush the majority of rules but keep those that > are essential to allow me to maintain connectivity to the box. Erm, could you do this as a unified diff rather - makes it a heck of a lot easier to read. :-) M -- Mark Murray Warning: this .sig is umop ap!sdn To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-audit" in the body of the message