Is this a hole in my firewall?
keramida at ceid.upatras.gr
Sun Nov 28 04:28:59 PST 2004
On 2004-11-28 04:48, Jonathon McKitrick <jcm at FreeBSD-uk.eu.org> wrote:
> On Sun, Nov 28, 2004 at 03:31:35AM +0200, Giorgos Keramidas wrote:
> : AFAIK, rule 00300 will never be hit by packets going out tun0 as long as
> : you also have rule 00200 in there.
> Hmmm.... here's a run after having the laptop running for a bit. I don't
> see why 200 doesn't cover the case either.
> root at neptune:~# ipfw show
> 00100 0 0 check-state
> 00200 6709 1277079 allow ip from me to any keep-state out xmit tun0
> 00300 2093 645797 allow ip from any to any keep-state out xmit tun0
Oops! That doesn't look good, unless I'm missing something about the
way 'me' works.
It's probably a good idea to send what you have so far to the
More information about the freebsd-questions