Re: ipfilter flags s keep state question

2005-02-16 Thread Dick Hoogendijk
On 16 Feb Murray Taylor wrote: tcp rules can use 'keep frags' TCP packets allow fragmentation by intermediate routers that need re-assembly at the final destination On Wed, 2005-02-16 at 08:36, dick hoogendijk wrote: I read a lot of rulesets for ipfilter just to study how others do the

ipfilter flags s keep state question

2005-02-15 Thread dick hoogendijk
I read a lot of rulesets for ipfilter just to study how others do the job. I've read the ipf HOWTO too. One thing is still very unclear to me though. Most rules for tcp have something like flags S keep state but *some* have flags S keep state keep frags Can someone explain to me *when* to use

Re: ipfilter flags s keep state question

2005-02-15 Thread Murray Taylor
tcp rules can use 'keep frags' TCP packets allow fragmentation by intermediate routers that need re-assembly at the final destination On Wed, 2005-02-16 at 08:36, dick hoogendijk wrote: I read a lot of rulesets for ipfilter just to study how others do the job. I've read the ipf HOWTO too. One