From owner-freebsd-security Wed Jun 12 5: 5:45 2002 Delivered-To: freebsd-security@freebsd.org Received: from insomnia.spc.org (insomnia.spc.org [195.224.94.183]) by hub.freebsd.org (Postfix) with SMTP id 974A337B40B for ; Wed, 12 Jun 2002 05:05:42 -0700 (PDT) Received: (qmail 32382 invoked by uid 1031); 12 Jun 2002 11:55:40 -0000 Date: Wed, 12 Jun 2002 11:55:40 +0000 From: Bruce M Simpson To: Mike Hoskins Cc: security@freebsd.org Subject: Re: firewall 'stateful failover' Message-ID: <20020612115540.A9893@spc.org> References: <20020610155455.Y96521-100000@snafu.adept.org> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.5.1i In-Reply-To: <20020610155455.Y96521-100000@snafu.adept.org>; from mike@adept.org on Mon, Jun 10, 2002 at 04:10:56PM -0700 Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Mike, This was on my list of 'cool things to do'; I'm pretty sure it's on other people's also. Perhaps something like CHATS funding might encourage it to bubble further up the priority queue? ;-) BMS On Mon, Jun 10, 2002 at 04:10:56PM -0700, Mike Hoskins wrote: > > Is there a way to handle the state table in ipfw/ipf? I could write > scripts to do 'failover', but I'm wandering if there's a way to 'share' > the state table between active and standby units or to pass the state > table from one firewall to another over a crossover. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message