Date: 24 Feb 2002 16:40:36 +0100 From: Dag-Erling Smorgrav <des@ofug.org> To: "Jeff Palmer" <scorpio@drkshdw.org> Cc: <freebsd-security@FreeBSD.ORG> Subject: Re: Couple of concerns with default rc.firewall Message-ID: <xzplmdivqff.fsf@flood.ping.uio.no> In-Reply-To: <001101c1bd48$2df35020$0286a8c0@home.lan> References: <003b01c1bcda$d4f06020$0286a8c0@home.lan> <xzpy9hjulb4.fsf@flood.ping.uio.no> <001101c1bd48$2df35020$0286a8c0@home.lan>
next in thread | previous in thread | raw e-mail | index | archive | help
"Jeff Palmer" <scorpio@drkshdw.org> writes: > Maybe you fail to see my point. I was wondering if there was a reason the > FreeBSD team has decided not to allow certain ICMP's by default. > I'm perfectly aware of how to change the rules to do what I want. I was > asking if there was a reason for this decision, or if it was an oversight. Are you trying to say that "deny ip from any to any" should *not* block all IP packets? DES -- Dag-Erling Smorgrav - des@ofug.org To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?xzplmdivqff.fsf>