Re: IPFW - keep-state/check-state And setup/established Confusion

2003-03-20 Thread Giorgos Keramidas
On 2003-03-19 15:19, Drew Tomlinson [EMAIL PROTECTED] wrote: I'm using ipfw2 to setup a firewall on 4.8-RC for my home network. I used the rule set at http://www.bsdtoday.com/2000/December/rc.firewall.current as an example but am confused regarding the differences between setting rules

Re: IPFW - keep-state/check-state And setup/established Confusion

2003-03-20 Thread Drew Tomlinson
- Original Message - From: Giorgos Keramidas [EMAIL PROTECTED] To: Drew Tomlinson [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Sent: Thursday, March 20, 2003 8:52 AM On 2003-03-19 15:19, Drew Tomlinson [EMAIL PROTECTED] wrote: I'm using ipfw2 to setup a firewall on 4.8-RC for my home

Re: IPFW - keep-state/check-state And setup/established Confusion

2003-03-20 Thread Giorgos Keramidas
On 2003-03-20 09:22, Drew Tomlinson [EMAIL PROTECTED] wrote: It does help. One other question I have is that I never see the check-state packet count incrementing. However I vaguely recall reading somewhere that it doesn't, even when packets pass via the rule. Is this correct? I'm not

Re: IPFW - keep-state/check-state And setup/established Confusion

2003-03-20 Thread Giorgos Keramidas
On 2003-03-20 11:56, James Long [EMAIL PROTECTED] wrote: On Thu, Mar 20, 2003 at 06:52:32PM +0200, Giorgos Keramidas wrote: use keep-state/check-state for everything by adding my check-state rule near the top and then adding the following rule for incoming services: ipfw add allow