Date: Tue, 25 Jul 2000 16:37:24 -0700 (PDT) From: Mike Hoskins <mike@adept.org> To: Stephen Montgomery-Smith <stephen@math.missouri.edu> Cc: "Rodney W. Grimes" <freebsd@gndrsh.dnsmgr.net>, freebsd-security@FreeBSD.ORG Subject: Re: Problems with natd and simple firewall Message-ID: <Pine.BSF.4.21.0007251636060.28594-100000@snafu.adept.org> In-Reply-To: <Pine.BSF.4.21.0007251622410.28594-100000@snafu.adept.org>
next in thread | previous in thread | raw e-mail | index | archive | help
On Tue, 25 Jul 2000, Mike Hoskins wrote:
> And, along those lines... Comments on the following, please. It attempts
> to mimic 'simple' as closely as possible and use compatible terminology
> for ease of comparison.
> + ${fwcmd} add allow ip from ${oip} to any keep-state
> + ${fwcmd} add allow ip from ${inet}:{$imask} to any keep-state
Except for using 'allow' instead of rc.firewall's 'pass'. Oops. Well,
except for that, any change suggestions? If not, could this be added?
-mrh
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.21.0007251636060.28594-100000>