There are some obscure options to ipfwadm.

-p policy: what's the difference between deny & reject ?

And now, to be sure I'm not wrong :

ipfwadm -I -a accept -P tcp -W eth0 -S0.0.0.0/0 1024:65535 -D
192.169.0.1 ftp 
-> means that I accept all incoming packets, going through eth0, tcp
only, from any address I want, in the port range of 1024:65535 and
addressed to 192.169.0.1, port ftp ?

all right.

Now, if I have several rules for let's say -O option, that may concern
the same range of address, how is this resolved ?
Is the first matching rule that is used , or the last, or the "closest"
to the address range ?


Eric :)
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
For daily digest info, email [EMAIL PROTECTED]

Reply via email to