On 2004-11-29 14:44, Jonathon McKitrick <[EMAIL PROTECTED]> wrote: > On Mon, Nov 29, 2004 at 03:09:30PM +0100, Ruben de Groot wrote: > : Your laptop won't be "exposed" by this. You could however finetune your > : ruleset a little bit by modifying rule 300 to something like: > : > : allow ip from ${INTERNAL_NET} to any keep-state out xmit tun0 > : > : where INTERNAL_NET would be e.g. 192.168.0.0/24 > > Should I also run a firewall on the laptop then, since all traffic to the > laptop is allowed to pass?
Probably, irrelevant to the original question, but... In general, it's not a bad idea. You won't have to "remember" to turn on firewalling when the laptop is connected to a different network; one that shouldn't really be trusted so much. _______________________________________________ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"