finding optimal ipfw strategy

Eugene Grosbein eugen at grosbein.net
Sat Aug 24 21:42:25 UTC 2019


25.08.2019 3:44, Victor Gamov wrote:

> Eugene
> 
> Many thanks for your reply!
> 
> I need to read more about tablearg and then modify my current production rules step by step.

Also, rules like "ipfw add 25013 deny udp from any to any" should be simplified
to "ipfw add 25013 deny ip from any to any" because only needed UDP packets hit these rules
and we can save another check for protocol type.



More information about the freebsd-net mailing list