Date: Thu, 24 Jan 2002 20:39:12 -0800 (PST) From: Patrick Greenwell <patrick@stealthgeeks.net> To: Tom <tom@uniserve.com> Cc: stable@freebsd.org Subject: Re: Firewall config non-intuitiveness Message-ID: <20020124203541.G39519-100000@rockstar.stealthgeeks.net> In-Reply-To: <Pine.BSF.4.10.10201242032350.56060-100000@athena.uniserve.ca>
next in thread | previous in thread | raw e-mail | index | archive | help
On Thu, 24 Jan 2002, Tom wrote:
>
> On Thu, 24 Jan 2002, Patrick Greenwell wrote:
>
> > I recently got bit by this: I have firewall options configured into my
> > kernel, and made the mistake of thinking that in order to disable
> ...
>
> Doesn't the kernel config documentation (LINT) explicitly state that the
> firewall option denies all traffic by default?
It sure does.
But that's rather beside the point. To me if I see something in a config
file that says "firewall_enable" and I set it to "no" I think it's
pretty reasonable to expect that I don't want any firewalling. A default deny
does not meet the criteria of "no firewall."
/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\
Patrick Greenwell
Stealthgeeks,LLC. Operations Consulting
http://www.stealthgeeks.net
\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-stable" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20020124203541.G39519-100000>