Date: Sun, 24 Jan 2021 12:08:07 +0100 From: Jos Chrispijn <bsduser@cloudzeeland.nl> To: Michael Sierchio <kudzu@tenebras.com>, FreeBSD Mailing List <freebsd-questions@freebsd.org> Subject: Re: IPFW | Too many dynamic rules? Message-ID: <3cfe3c72-453b-e54e-3c56-9abf80f45be3@cloudzeeland.nl> In-Reply-To: <CAHu1Y73ynYG18KcsYcbjazC45g8rchPJppQ8Apja0Fwhsr5fyQ@mail.gmail.com> References: <e73687db-0f6e-9d45-c9c9-57bbfd1ae8e9@cloudzeeland.nl> <CAHu1Y73Qcz7G2gX1_2zM0nJp_c5qA604Z=U9xxNZL_g_cJNhxA@mail.gmail.com> <b567dd97-4e1a-7870-d0f5-c477fc488403@cloudzeeland.nl> <CAHu1Y73ynYG18KcsYcbjazC45g8rchPJppQ8Apja0Fwhsr5fyQ@mail.gmail.com>
next in thread | previous in thread | raw e-mail | index | archive | help
Thanks for your help, Michael. Knowing so little about ipfw, I think it will be time to raise my learning curve on it. Can you hint me where I can get more information on nub level? Especially the remark Michael made "The lifetime of dynamic rules is, by default, way too long." intriques me. What is the exact result shortening them? Do I undermine ipfw protection by giving it too less or too much time to check incoming requests? Best, Jos Op 22-1-21 om 1:58 schreef Michael Sierchio: > > Vell succes! > Dank je!
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?3cfe3c72-453b-e54e-3c56-9abf80f45be3>