Date: 26 Aug 2003 08:06:45 -0400 From: Lowell Gilbert <freebsd-questions-local@be-well.no-ip.com> To: freebsd-questions@freebsd.org Subject: Re: IPFW & ICMP Message-ID: <448ypgvd0q.fsf@be-well.ilk.org> In-Reply-To: <3F4AD0BA.7050201@comcast.net> References: <Pine.BSF.4.21.0308251956020.37550-100000@server1.ultratrends.com> <3F4AD0BA.7050201@comcast.net>
next in thread | previous in thread | raw e-mail | index | archive | help
K Anderson <freebsduser@comcast.net> writes: > I figure > that the firewall should block the traffic first so as to prevent > ruled traffic from coming in and then, in my thinking, snort shouldn't > see it. > > Hopefully somebody might have an explanation with the why's and how > comes one way or the other. Your way would rule out sniffing of third-party traffic.
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?448ypgvd0q.fsf>