From owner-freebsd-hackers Sun Mar 28 8:55:14 1999 Delivered-To: freebsd-hackers@freebsd.org Received: from relay.ucb.crimea.ua (relay.ucb.crimea.ua [212.110.138.1]) by hub.freebsd.org (Postfix) with ESMTP id 65B7D14CE9 for ; Sun, 28 Mar 1999 08:55:04 -0800 (PST) (envelope-from ru@ucb.crimea.ua) Received: (from ru@localhost) by relay.ucb.crimea.ua (8.9.2/8.9.2/UCB) id TAA84819; Sun, 28 Mar 1999 19:53:22 +0300 (EEST) (envelope-from ru) Date: Sun, 28 Mar 1999 19:53:21 +0300 From: Ruslan Ermilov To: Luigi Rizzo Cc: freebsd-hackers@FreeBSD.ORG Subject: Re: ipfw behavior, is it normal? Message-ID: <19990328195321.A83154@relay.ucb.crimea.ua> Mail-Followup-To: Luigi Rizzo , freebsd-hackers@FreeBSD.ORG References: <19990328152846.B065314C14@hub.freebsd.org> <199903281348.PAA03730@labinfo.iet.unipi.it> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Mailer: Mutt 0.95.3i In-Reply-To: <199903281348.PAA03730@labinfo.iet.unipi.it>; from Luigi Rizzo on Sun, Mar 28, 1999 at 03:48:36PM +0200 X-Operating-System: FreeBSD 3.1-STABLE i386 Sender: owner-freebsd-hackers@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG On Sun, Mar 28, 1999 at 03:48:36PM +0200, Luigi Rizzo wrote: > > > should we add another instruction to ipfw > > > > > > between A and B ... > > > > > > to ease life in configuring firewalls ? Performance of a ruleset > > > will be only marginally improved, but having simpler rules will > > > indirectly make configurations more secure by reducing mistakes. > > > > i understand between to be a short cut that replaces "from A to B" > > and "from B to A". > > functionally, yes. but it would map (and you would see) only a single > ipfw rule. > allow ip between any and any ;-) -- Ruslan Ermilov Sysadmin and DBA of the ru@ucb.crimea.ua United Commercial Bank +380.652.247.647 Simferopol, Ukraine http://www.FreeBSD.org The Power To Serve http://www.oracle.com Enabling The Information Age To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-hackers" in the body of the message