Date: Mon, 21 Feb 2000 15:39:55 +0100 (CET) From: Luigi Rizzo <luigi@info.iet.unipi.it> To: "Nicolai Petri (ML)" <nppmf@swamp.dk> Cc: freebsd-ipfw@FreeBSD.ORG Subject: Re: keep-state option in CURRENT. Message-ID: <200002211439.PAA93283@info.iet.unipi.it> In-Reply-To: <Pine.BSF.4.21.0002211532470.31151-100000@distortion.dk> from "Nicolai Petri (ML)" at "Feb 21, 2000 03:44:34 pm"
next in thread | previous in thread | raw e-mail | index | archive | help
> > You should write the following rules ... > Perfekt. I do not know why i missed the check-state rule.. Would it be an > idea to check if there is a check-state entry ? I think it could bite a > lot of people because the firewall simply fills up the ruletable and never > clears it. (It looks really nasty on the console btw.) not sure what you mean -- state is checked at the first keep-state rule anyways (did i mention this in the manpage ? I hope so...) so the ruletable should clear out. I hope you have the latest version of the code, i did a couple of small commits after the first one... > What about the invalid state messages i recieve .. Is it something I > should trace or is it simply not handle 100% yet? invalid state msgs should be those for udp perhaps... maybe i should make the thing a bit less verbose. cheers luigi -----------------------------------+------------------------------------- Luigi RIZZO, luigi@iet.unipi.it . Dip. di Ing. dell'Informazione http://www.iet.unipi.it/~luigi/ . Universita` di Pisa TEL/FAX: +39-050-568.533/522 . via Diotisalvi 2, 56126 PISA (Italy) Mobile +39-347-0373137 -----------------------------------+------------------------------------- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-ipfw" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200002211439.PAA93283>