Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 17 Jul 2002 14:02:31 +0200
From:      Bart Matthaei <bart@dreamflow.nl>
To:        "Carroll, D. (Danny)" <Danny.Carroll@mail.ing.nl>
Cc:        security@freebsd.org
Subject:   Re: ipfw and it's glory...
Message-ID:  <20020717120231.GB40276@heresy.dreamflow.nl>
In-Reply-To: <6C506EA550443D44A061432F1E92EA4C6C535A@ing.com>
References:  <6C506EA550443D44A061432F1E92EA4C6C535A@ing.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On Wed, Jul 17, 2002 at 01:57:40PM +0200, Carroll, D. (Danny) wrote:
> :Some things tend to break when you leave it out. I can't give you any
> :examples atm, since I don't recall them :)
> 
> Been in that world of hurt but I managed to get everything *I* need...
> (FTP, IRC, ICQ)
> The only exception was LiveUpdate for Symantec.
> 
> Punch_FW with natd works for me in these cases, but without nat running
> I guess it would be harder.

Natd on a firewall ? Firewalling a public network ? I don't think so
:)

> :Then add deny rules for port 6000 :)
> 
> And anything else that might get forgotten... ;)

You know what your running, So if your forgetting, your a messy
admin :)

Cheers,

Bart

-- 
Bart Matthaei                 bart@dreamflow.nl 

If at first you don't succeed, redefine success.

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20020717120231.GB40276>