IPFW: Is keep/check-state inherent?
Michael Powell
nightrecon at verizon.net
Sat Aug 30 08:26:00 UTC 2008
Steve Bertrand wrote:
> Hi everyone,
>
> I can't recall for certain, but not so long ago, I either read or heard
> about IPFW having implicit keep-state and check-state.
>
> Is it true that I can now omit these keywords in my rulesets?
>
Haven't used IPFW in years so I do not know about IPFW.
However, this is the case for the lastest pf upgrade/import from OpenBSD.
For pf now I think you need no state if you want to disable, as keep state
is "on" by default now.
-Mike
More information about the freebsd-questions
mailing list