Is this a hole in my firewall?

[Giorgos Keramidas]

On 2004-11-29 14:44, Jonathon McKitrick <jcm at FreeBSD-uk.eu.org> wrote:
> On Mon, Nov 29, 2004 at 03:09:30PM +0100, Ruben de Groot wrote:
> : Your laptop won't be "exposed" by this. You could however finetune your
> : ruleset a little bit by modifying rule 300 to something like:
> :
> : allow ip from ${INTERNAL_NET} to any keep-state out xmit tun0
> :
> : where INTERNAL_NET would be e.g. 192.168.0.0/24
>
> Should I also run a firewall on the laptop then, since all traffic to the
> laptop is allowed to pass?

Probably, irrelevant to the original question, but...

In general, it's not a bad idea.  You won't have to "remember" to turn
on firewalling when the laptop is connected to a different network; one
that shouldn't really be trusted so much.