Ensel Sharon wrote:
[ ... ]
Two questions:  is it appropriate to have line 01000 above all of my
bad-behavior lines ?

"established" means "ACK and not SYN", basicly. Your "bad behavior" rules wouldn't really match anything which matches established, but it's probably better to block known-bad stuff earlier on.

However, it's not the same thing as stateful tracking, which you might want to consider using depending on what you're doing...

freebsd-questions@freebsd.org mailing list
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Reply via email to