Date: Fri, 10 Aug 2001 16:08:48 -0500 From: Jon Loeliger <jdl@jdl.com> To: Krzysztof Zaraska <kzaraska@student.uci.agh.edu.pl> Cc: security@FreeBSD.ORG Subject: Re: IPFW Dynamic Rules Message-ID: <E15VJWU-000J6t-00@jdl.com> In-Reply-To: Your message of "Fri, 10 Aug 2001 14:23:56 %2B0200." <Pine.BSF.4.21.0108101308460.63404-100000@lhotse.zaraska.dhs.org>
next in thread | previous in thread | raw e-mail | index | archive | help
So, like Krzysztof Zaraska was saying to me just the other day: > > [ ... ] > > Generally I construct firewall rules like this: > 1. deny everything > 2. allow all connections from inside to outside world. TEST. > 3. allow the outside world to connect to selected services. TEST. > 4. TEST. Specifically check if no unwanted connections may be initiated > from outside. Krzysztof, This was one of the most enlightening and helpful explanations of IPFW and packet filtering I've read anywhere! Thanks for the insight and help! jdl To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?E15VJWU-000J6t-00>