Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 22 Oct 2011 09:56:12 -0400
From:      Carmel <carmel_ny@hotmail.com>
To:        FreeBSD <freebsd-questions@freebsd.org>
Subject:   Configuring IPFW
Message-ID:  <BLU0-SMTP235296774800AA3D588B52193E90@phx.gbl>

next in thread | raw e-mail | index | archive | help
I am attempting to set up a firewall using IPFW with a stateful
behavior.

While I have investigated how to set up these rules, I have run into
conflicting opinions as to whether to all or deny "established"
behavior.

EXAMPLE: (preceded by a "checkstate" rule)

allow tcp from any to any established


Some documentation states that it should be denied and others say it
should be allowed. Neither has given me a convincing reason to follow
either scenario or any real documentation either for that fact.

If possible, could someone with some real firewall knowledge and
familiarity with IPFW please give me some advice.

Thanks!

-- 
Carmel ✌
carmel_ny@hotmail.com




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?BLU0-SMTP235296774800AA3D588B52193E90>