On Tue, Oct 21, 2003 at 03:20:04PM +0300, Ionut Boldizsar wrote:
> On Tue, 2003-10-21 at 15:10, Birzan George Cristian wrote:
> > -I ca altfel nu faceti nimic. In fine, daca te bazezi pe default policy
> > ACCEPT, da, merge si -A, dar cine mai foloseste asa ceva? :-)
> 
> Eu. Mi se pare mai logic sa fac un catch-all rule in fiecare chain decat
> sa ma incui afara cu un default policy deny.
Let me rephrase. default policy accept, si fara catch all. Firewall-uri
'deny some, allow the rest'.

-- 
Birzan George                   Violence is the last refuge of
  Cristian                      the incompetent -- Salvor Hardin

-- Attached file included as plaintext by Ecartis --
-- File: signature.asc
-- Desc: Digital signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (GNU/Linux)

iD8DBQE/lSW2aqNK6cml/6cRAstUAKCXDn5DjLV6Uk37BBCIZ3nVEYhF9wCgkqYV
AYVLLkc095N3QFecmJEzZn0=
=qYNd
-----END PGP SIGNATURE-----



--- 
Detalii despre listele noastre de mail: http://www.lug.ro/


Raspunde prin e-mail lui