Date: Tue, 22 Jul 2003 10:31:17 +0200 From: Sheldon Hearn <sheldonh@starjuice.net> To: David O'Brien <obrien@FreeBSD.org> Cc: freebsd-arch@FreeBSD.org Subject: Re: Things to remove from /rescue Message-ID: <20030722083117.GC66789@starjuice.net> In-Reply-To: <20030721202314.GC21068@dragon.nuxi.com> References: <20030719171138.GA86442@dragon.nuxi.com> <XFMail.20030721151553.jhb@FreeBSD.org> <20030721202314.GC21068@dragon.nuxi.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On (2003/07/21 13:23), David O'Brien wrote: > You seem to have another email in mind than the one you've been replying > to. Please answer the question asked: > > If I did need to get to the Internet to get bits, what does ipfw do > for me that "sysctl net.inet.ip.fw.enable=0" doesn't? > > the reader should assume the user is using ipfw and not another packet > filter. What ipfw gives you that sysctl net.inet.ip.fw.enable=0 doesn't is the ability to arrange _limited_ Internet connectivity without opening up a hole so big a truck could drive through it. Ciao, Sheldon.
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20030722083117.GC66789>