Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 29 Feb 2000 09:50:56 -0800 (PST)
From:      "Rodney W. Grimes" <freebsd@gndrsh.dnsmgr.net>
To:        sergey@GLB.NET (Sergey V. Kart)
Cc:        Cy.Schubert@uumail.gov.bc.ca (Cy Schubert - ITSD Open Systems Group), cjclark@home.com, lev@imc.macro.ru (Lev Serebryakov), freebsd-security@FreeBSD.ORG (All)
Subject:   Re: ipfw log accounting
Message-ID:  <200002291750.JAA82610@gndrsh.dnsmgr.net>
In-Reply-To: <Pine.BSF.4.05.10002291536340.24153-100000@dima.glb.net> from "Sergey V. Kart" at "Feb 29, 2000 03:39:51 pm"

next in thread | previous in thread | raw e-mail | index | archive | help
> > Actually you need to be a bit selective, your host is going to have
> > a real hard time doing arp's if you block all broadcast packets.  Make
> > sure you have a directly connected network specific ``allow'' of broadcast
> > destinations.
> Actually ARP works at 2 Layer of OSI ... If you'll block all broadcast
> packets ARP will be working properly !

Perhaps ARP will work, but your going to have problems if you block
all broadcast traffic, unless you have a very rare installation that
does not need broadcast packets to work on the directly attached network.

(Rip will defanitly not work)


-- 
Rod Grimes - KD7CAX @ CN85sl - (RWG25)               rgrimes@gndrsh.dnsmgr.net


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200002291750.JAA82610>