This is obviously a stupid question to the cognoscenti, but what do the 
"input" and "output" firewall options on the ipfwadm command actually, or 
are meant to be used for?

I have a LRP firewall set up up with machine "A" on the internal network 
side. With no firewalling (i.e. accept all) I can ping it, read it's web 
pages etc from the external side. I can then use ipfwadm -F to block http 
(for example) from a specific external host. This works fine. If I then 
reinstate forwading and use ipfwadm -I with similar parameters, I get the 
same result. So what's the difference between F, I, and O? Is F simply a 
combination of I and O for ease of use?

Neil

application/ms-tnef

Reply via email to