From owner-freebsd-questions  Thu Oct 24 23:48:27 2002
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id C909837B401
	for <freebsd-questions@freebsd.org>; Thu, 24 Oct 2002 23:48:26 -0700 (PDT)
Received: from ariel.ucs.unimelb.edu.au (ariel.ucs.unimelb.edu.au [128.250.20.3])
	by mx1.FreeBSD.org (Postfix) with ESMTP id A159743E42
	for <freebsd-questions@freebsd.org>; Thu, 24 Oct 2002 23:48:25 -0700 (PDT)
	(envelope-from jrhoden@unimelb.edu.au)
Received: from elkanah.its.unimelb.edu.au (elkanah.its.unimelb.edu.au [128.250.18.41])
	by ariel.ucs.unimelb.edu.au (8.12.3/8.12.3) with ESMTP id g9P6mOiB022680
	for <freebsd-questions@freebsd.org>; Fri, 25 Oct 2002 16:48:24 +1000 (EST)
Content-Type: text/plain;
  charset="iso-8859-1"
From: Jacob Rhoden <jrhoden@unimelb.edu.au>
Organization: University of Melbourne
To: freebsd-questions@freebsd.org
Subject: Re: Whats the deal?
Date: Fri, 25 Oct 2002 16:48:23 +1000
X-Mailer: KMail [version 1.4]
References: <20021025005639.507fd4a1.bryanc2000@insightbb.com> <20021025013131.13ddf403.bryanc2000@insightbb.com> <20021025162440.796a9f18.lloy0076@adam.com.au>
In-Reply-To: <20021025162440.796a9f18.lloy0076@adam.com.au>
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Message-Id: <200210251648.23960.jrhoden@unimelb.edu.au>
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-questions.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-questions>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-questions>
X-Loop: FreeBSD.ORG

On Fri, 25 Oct 2002 16:54, David Lloyd wrote:
> I tend to add a rule that is the equivalent of "accept everything" at
> 65534 or thereabouts _if_ and _only if_ I really want a firewall of thi=
s
> type.

Actually, I would reccomend the opposite (if it is a remote server), so 6=
5535=20
allows all, and 65534 denies all.

The reason for this, is if your rc.firewall file is accidentally stuffed =
up or=20
your rc.conf file or something similar, if the rc.firewall is not setup=20
properly, you are locked out of your system. But when all is fine, it=20
defaults to deny all.

Regards,
Jacob

Jacob Rhoden            Phone: +61 3 8344 6102
ITS Division            Email: jrhoden@unimelb.edu.au
Melbourne University   Mobile: +61 403 788 386

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message