Stateful IPFW - too many connections in FIN_WAIT_2 or LAST_ACK
cswiger at mac.com
Sat Apr 21 16:08:36 UTC 2012
On Apr 21, 2012, at 4:41 AM, Dmitry S. Kasterin wrote:
> The "DYNAMIC RULES" section gives the following recommendation:
> ipfw add check-state
> ipfw add deny tcp from any to any established
> ipfw add allow tcp from my-net to any setup keep-state
> Is the second rule necessary?
If your security policy is "default deny", then yes.
More information about the freebsd-net