Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 21 Mar 2003 02:26:51 +0200
From:      Giorgos Keramidas <keramida@ceid.upatras.gr>
To:        Drew Tomlinson <drew@mykitchentable.net>
Cc:        freebsd-questions@FreeBSD.ORG
Subject:   Re: IPFW - "keep-state/check-state" And "setup/established" Confusion
Message-ID:  <20030321002651.GE1538@gothmog.gr>
In-Reply-To: <000a01c2ef05$43ed1100$6e2a6ba5@tagalong>
References:  <00d401c2ee6e$0abf07e0$6e2a6ba5@tagalong> <20030320165232.GB6347@gothmog.gr> <000a01c2ef05$43ed1100$6e2a6ba5@tagalong>

next in thread | previous in thread | raw e-mail | index | archive | help
On 2003-03-20 09:22, Drew Tomlinson <drew@mykitchentable.net> wrote:

> It does help.  One other question I have is that I never see the
> "check-state" packet count incrementing.  However I vaguely recall
> reading somewhere that it doesn't, even when packets pass via the
> rule.  Is this correct?

I'm not sure if this is the way it works.  I'd have to check the
kernel side of ipfw to see if this works this way, and IPFW2's
kernel part is far from understandable for a kernel newbie like me :)

- Giorgos


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20030321002651.GE1538>