Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 29 Jan 2003 00:01:34 +0100
From:      "Simon L. Nielsen" <simon@nitro.dk>
To:        freebsd-ipfw@freebsd.org
Subject:   Error in ipfw manpage for stateful rules?
Message-ID:  <20030128230133.GF414@nitro.dk>

next in thread | raw e-mail | index | archive | help

--XvKFcGCOAo53UbWW
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable


Hello

The ipfw man page for stateful rules has two examples. Shouldn't the
allow rule have a keep-state keyword ?

So

ipfw add check-state
ipfw add allow tcp from my-subnet to any setup
ipfw add deny tcp from any to any

is changed to

ipfw add check-state
ipfw add allow tcp from my-subnet to any setup keep-state
ipfw add deny tcp from any to any

And similar for udp.

--=20
Simon L. Nielsen

--XvKFcGCOAo53UbWW
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (FreeBSD)

iD8DBQE+NwvN8kocFXgPTRwRAqpcAJ0XbhVx7IJWXYAsge7xc6yqLP6FMACfVzq3
H4tYwZNGHPX8Bi10eZMY8uw=
=+1wZ
-----END PGP SIGNATURE-----

--XvKFcGCOAo53UbWW--

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-ipfw" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20030128230133.GF414>