From owner-freebsd-questions@FreeBSD.ORG Sat Sep 11 08:11:02 2010 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 68BC91065675 for ; Sat, 11 Sep 2010 08:11:02 +0000 (UTC) (envelope-from perryh@pluto.rain.com) Received: from agora.rdrop.com (agora.rdrop.com [IPv6:2607:f678:1010::34]) by mx1.freebsd.org (Postfix) with ESMTP id 431C68FC16 for ; Sat, 11 Sep 2010 08:11:02 +0000 (UTC) Received: from agora.rdrop.com (66@localhost [127.0.0.1]) by agora.rdrop.com (8.13.1/8.12.7) with ESMTP id o8B8B0Gv051025 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT); Sat, 11 Sep 2010 01:11:02 -0700 (PDT) (envelope-from perryh@pluto.rain.com) Received: (from uucp@localhost) by agora.rdrop.com (8.13.1/8.12.9/Submit) with UUCP id o8B8B0cO051024; Sat, 11 Sep 2010 01:11:00 -0700 (PDT) Received: from fbsd61 by pluto.rain.com (4.1/SMI-4.1-pluto-M2060407) id AA16235; Sat, 11 Sep 10 01:09:07 PDT Date: Sat, 11 Sep 2010 01:05:29 -0700 From: perryh@pluto.rain.com To: sudakov@sibptus.tomsk.ru Message-Id: <4c8b3849.mx6rDwHZtDT6N5YR%perryh@pluto.rain.com> References: <20100822052550.GA42346@admin.sibptus.tomsk.ru> <20100907090012.GA48608@admin.sibptus.tomsk.ru> <4C8616F0.5010401@gmx.com> <20100907110033.GA51618@admin.sibptus.tomsk.ru> <4C864145.80805@gmx.com> <20100907145223.GA55660@admin.sibptus.tomsk.ru> <4C8754CD.6030003@gmx.com> <20100910125534.GA50527@admin.sibptus.tomsk.ru> In-Reply-To: <20100910125534.GA50527@admin.sibptus.tomsk.ru> User-Agent: nail 11.25 7/29/05 Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Cc: freebsd-questions@freebsd.org Subject: Re: ipfw fwd and ipfw allow X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 11 Sep 2010 08:11:02 -0000 Victor Sudakov wrote: > ... the 'fwd ... keep-state' statement does create a useful > dynamic rule. It contradicts the ipfw(8) man page but works ... Hopefully someone who understands all this will submit a patch for the man page :)