IPFW: Is keep/check-state inherent?

Michael Powell nightrecon at verizon.net
Sat Aug 30 08:26:00 UTC 2008


Steve Bertrand wrote:

> Hi everyone,
> 
> I can't recall for certain, but not so long ago, I either read or heard
> about IPFW having implicit keep-state and check-state.
> 
> Is it true that I can now omit these keywords in my rulesets?
> 

Haven't used IPFW in years so I do not know about IPFW. 

However, this is the case for the lastest pf upgrade/import from OpenBSD.
For pf now I think you need no state if you want to disable, as keep state
is "on" by default now. 

-Mike





More information about the freebsd-questions mailing list