david at catwhisker.org
Mon Apr 17 22:44:15 UTC 2006
On Mon, Apr 17, 2006 at 06:29:13PM -0400, Charles Swiger wrote:
> [ ...redirected to freebsd-questions... ]
Thanks for doing that!
> You don't have a check-state rule anywhere, so you either need to add
> one or a rule to pass established traffic to and from port 22.
I thought check-state was fairly optional; ref:
These dynamic rules, which have a limited lifetime, are checked at the
first occurrence of a check-state, keep-state or limit rule, and are typ-
ically used to open the firewall on-demand to legitimate traffic only.
See the STATEFUL FIREWALL and EXAMPLES Sections below for more informa-
tion on the stateful behaviour of ipfw.
(from "man ipfw" on a 4.11 system).
David H. Wolfskill david at catwhisker.org
Mail filters, like sewers, need to be most restrictive at the point of entry.
See http://www.catwhisker.org/~david/publickey.gpg for my public key.
More information about the freebsd-questions