> > The -W option means something different on input rules vs. forward > rules. On the input rule, it refers to the interface that the traffic > is coming from. On the forward rules, it refers to the interface to > which traffic is being SENT. > Maybe I misunderstood you. On the input rule, doesn't -W refer to the the interface where the traffic is coming into For example: "ipfwadm -I -a deny -W eth1 -S any/0" Isn't this saying "deny all traffic entering eth1?" For the forward rule, what does something like this, "ipfwadm -F -a accept -W eth1 -S any/0 -D 192.168.1.2" mean? Let's assume that eth1 is the external NIC in a dual-homed gateway. Thanks. --Daniel _______________________________________________ Masq maillist - [EMAIL PROTECTED] http://tiffany.indyramp.com/mailman/listinfo/masq Admin requests can be handled by web (above) or [EMAIL PROTECTED]
