> [...]
>> Is this an acceptable configuration?  Any hints on how to make this
>> better?
>
> I'd use:
>
> interface eth0 internet src not "${UNROUTABLE_IPS}" \
>      [ dst $ip ] # if your ip is static
>
>    policy reject
>    protection strong

Thanks Gian, I am just running a website from by box at home and it is a
dynamic ip address actually through DSL and an ip address of 192.168.0.138
through a D-Link router.  So I will keep the <interface eth0 internet src
not "${UNROUTABLE_IPS}"> and I will leave out the <[ dst $ip ] # if your
ip is static>

JM.



-- 
-JM. �Estos d�as azules y este sol de la infancia �(Antonio Machado-1939)


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to