Hi. > I would like to apply rules to a machine with > currently no rules > enabled. How can I do this without breaking all the > current connections?
First find out what type of traffic you wish to permit. Then create /etc/ipf.conf with the content pass in quick on incoming-interface proto tcp from any to any port = xyz flags S keep state pass in quick on incoming-interface proto udp from any to any port = xyz keep state Likewise with outgoing traffic. If you permit incoming port 80 (http) and keep state you won't have to permit outgoing http. To reload your ruleset use 'ipf -Fa -f /etc/ipf.conf'. The FAQ at http://home.earthlink.net/~jaymzh666/ipf/index.html gives some information as well. Regards Claus Beskyt din computer mod virus og misbrug! L�s mere i Yahoo! Sikkerhedscenter p� www.yahoo.dk/sikkerhedscenter
