Re: NATD: net.inet.ip.fw.default_to_accept="1" vs firewall_type="OPEN"

2013-10-10 Thread Chris Stankevitz
On Thu, Oct 10, 2013 at 8:22 PM, Michael Ross wrote: > ipfw always has one default rule, standard is > > [snip] > > Specifing firewall_type="OPEN" gives you an additional rule Michael, Thank you that is exactly what I am seeing. Chris ___ freebsd-que

Re: NATD: net.inet.ip.fw.default_to_accept="1" vs firewall_type="OPEN"

2013-10-10 Thread Michael Ross
On Fri, 11 Oct 2013 04:38:45 +0200, Chris Stankevitz wrote: Hello, Handbook section 31.9 describes the setup of NAT. Section 31.9.3 suggests net.inet.ip.fw.default_to_accept="1" "during the first attempts to setup a firewall and NAT gateway". Section 31.9.5 suggests I "specify a predefined

NATD: net.inet.ip.fw.default_to_accept="1" vs firewall_type="OPEN"

2013-10-10 Thread Chris Stankevitz
Hello, Handbook section 31.9 describes the setup of NAT. Section 31.9.3 suggests net.inet.ip.fw.default_to_accept="1" "during the first attempts to setup a firewall and NAT gateway". Section 31.9.5 suggests I "specify a predefined firewall ruleset that allows anything in" with firewall_type="OPE