Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 07 Feb 1999 20:59:26 +0000
From:      Brian Somers <brian@Awfulhak.org>
To:        Danil Shebunin <daktaklakpak@mtu-net.ru>
Cc:        freebsd-questions@FreeBSD.ORG, freebsd-hackers@FreeBSD.ORG
Subject:   Re: user ppp packet filtering & ipfw 
Message-ID:  <199902072059.UAA38475@keep.lan.Awfulhak.org>
In-Reply-To: Your message of "Sun, 07 Feb 1999 13:43:25 %2B0300." <Pine.BSF.4.05.9902051511020.346-100000@free-bsd.space> 

next in thread | previous in thread | raw e-mail | index | archive | help
[.....]
> When the rules calculated, if packet is come from outside (Internet):
> before IP packet de-aliasing is performed, or after the packet appears in
> internal network? And what about packet going from inside to outside?

filter rules are applied before outgoing stuff is aliased and after 
incoming stuff is de-aliased.

> Maybe the point is to use ppp packet filtering for external network and
> ipfw - for internal? Or maybe I can use ipfw for both networks. In this
> case, how can I specify dynamic IPaddr in ipfw rules.

Use the interface rather than the IP address (via tun0).

> P.P.S. PLEASE, PLEASE, PLEASE Reply to my e-mail also - I do not
> subscribed on this mailing lists.
> 
> 
> Thanks, as long as you answer.
> 
> -- 
> ===---===---===---===---===---===
> Have a nice CONNECT!
> Dan (daktaklakpak@public.mtu.ru)
> ===---===---===---===---===---===

-- 
Brian <brian@Awfulhak.org> <brian@FreeBSD.org> <brian@OpenBSD.org>
      <http://www.Awfulhak.org>;
Don't _EVER_ lose your sense of humour !



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199902072059.UAA38475>