Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 30 Apr 2003 09:14:18 +0200
From:      Antoine Jacoutot <ajacoutot@lphp.org>
To:        cjclark@alum.mit.edu, "Crist J. Clark" <crist.clark@attbi.com>
Cc:        freebsd-ipfw@freebsd.org
Subject:   Re: ipfw dynamic rule timeout
Message-ID:  <200304300914.18382.ajacoutot@lphp.org>
In-Reply-To: <20030430045856.GA23926@blossom.cjclark.org>
References:  <200304271259.02025.ajacoutot@lphp.org> <200304300100.42983.ajacoutot@lphp.org> <20030430045856.GA23926@blossom.cjclark.org>

Next in thread | Previous in thread | Raw E-Mail | Index | Archive | Help
On Wednesday 30 April 2003 06:58, Crist J. Clark wrote:
> I think several of the articles point to the easiest solution: Don't
> use keep-state rules in conjunction with natd(8). Keep-state doesn't
> offer you anything more than using natd(8) with stateless rules for
> the vast majority of policies.

Yes, thanks, that's what I though too.
I guess I'll just have to write a new "stateless" ruleset (I always used 
keep-state).
Regards.

Antoine



Want to link to this message? Use this URL: <http://docs.FreeBSD.org/cgi/mid.cgi?200304300914.18382.ajacoutot>