IPFW - Keep State

Grant Peel gpeel at thenetnow.com
Fri Aug 31 05:35:44 PDT 2007


In a nutsheel, is it really necessary, or is thier a really compelling reason to use keep-state for a normal web - email server?

I sometimes see "Too many dynamic rules" and can see a correlation between customer complaints and these log entries.

My server all have about 200 rules, most of them counters for bandwidth accounting.

-Grant


More information about the freebsd-questions mailing list